Keep skill manifest install paths package-safe

[kriptoburak]

Summary

• Align skill.json with package.json version 1.0.1.
• Point the Claude Code install command at skills/five-step-method, the path included in the npm package.
• Add an OpenClaw install command for the existing OpenClaw skill source.

Validation

• node --check bin/install.js
• node JSON parse and manifest/package version check
• npm pack --dry-run --json
• git diff --check

Note: README link checking still sees npmjs.com return a Cloudflare 403 challenge to CLI requests; this PR does not add or change README links.