feat(skills)!: consolidate github setup

[altaywtf]

Summary

Consolidates the GitHub release/deploy skill surface into a single gh-setup skill and removes the standalone uinaf-design-system skill from this repo.

Changed

• Adds skills/gh-setup with repo settings, templates, Actions security, release, deploy, environment, secret, and troubleshooting guidance.
• Removes gh-deploy-pipeline, gh-release-pipeline, and uinaf-design-system from the skill tree and sync manifest.
• Updates adjacent agent-readiness, docs, and vite-plus guidance around .node-version, Node 24.x LTS, and gh-setup.
• Hardens the skill publish workflow with skip-CI guards, non-cancellable publish concurrency, full-history checkout, unpersisted checkout credentials, and workflow-token version-bump writeback.

Risks

• Breaking skill rename/removal: consumers must move from gh-deploy-pipeline / gh-release-pipeline to gh-setup; uinaf-design-system is no longer published from this repo.
• Publish writeback depends on branch protection not using push restrictions with workflow GITHUB_TOKEN; live main protection was adjusted accordingly while keeping force-push and deletion disabled.

Verification

• actionlint .github/workflows/publish-skills.yml
• git diff --check
• JSON parse checks for changed eval/manifests
• npx tessl@0.79.1 skill review --threshold 90 skills/gh-setup
• ./scripts/skills/review.sh --threshold 90
• codex-review --mode local reported no actionable findings

Complexity

Reduced. The two GitHub pipeline skills now share one owner, and duplicated release/deploy/security guidance is centralized behind target-specific references.

---

Summary by cubic

Consolidates GitHub release/deploy guidance into a single gh-setup skill and strengthens the skills publish workflow. Removes gh-deploy-pipeline, gh-release-pipeline, and uinaf-design-system.

• New Features

  • Added skills/gh-setup covering repo settings, templates, Actions security, release/deploy workflows, environments, secrets, and troubleshooting.
  • Hardened .github/workflows/publish-skills.yml: both review and publish skip [skip ci], non-cancellable publish concurrency, full-history checkout, no persisted credentials, and workflow GITHUB_TOKEN version writeback.
  • Centralized release/deploy docs and evals under gh-setup; guidance updated to Node 24.x LTS via .node-version.

• Migration

  • Replace gh-deploy-pipeline and gh-release-pipeline with gh-setup in usage and scripts/sync/skills.json.
  • Add .node-version (Node 24.x LTS) and have Actions read it with node-version-file.
  • If you rely on automated tile version writeback, allow pushes from the workflow GITHUB_TOKEN on main (no push-restriction rules that block it).
  • Remove uinaf-design-system from manifests; it is no longer published from this repo.

^{Written for commit d3c301a. Summary will update on new commits. Review in cubic}

[cubic-dev-ai]

1 issue found across 67 files

<sub>Partial review: This PR has more than 50 files, so cubic reviewed the highest-priority files first. During the trial, paid plans get a higher file limit.
You can try an ultrareview to bypass the file limit, comment @cubic-dev-ai ultrareview. Learn more.

Fix all with cubic | Re-trigger cubic</sub>