chore(skills): move the project skills from .opencode/skills to .agent/skills

Maintainer decision 2026-10-02 (no symlink). AGENTS.md, README, the two spec
docs, the kiro-spec-batch skill and the provenance ignore list are repointed;
the OpenCode plugin package.json stays under .opencode.

Co-Authored-By: Claude Fable 5.1 <[email protected]>
Claude-Session: https://claude.ai/code/session_01EmM1j46qgKMh3zqD1QMwEo

.agent/skills/openultrasast-triage/SKILL.md

@@ -0,0 +1,34 @@
+---
+name: openultrasast-triage
+description: OpenUltraSAST false-positive elimination, ranking calibration, evidence ladder, verifier triage, and finding adjudication. Use when reviewing findings, reducing false positives, or deciding whether evidence is enough.
+---
+
+# OpenUltraSAST Triage
+
+Use this skill when triaging OpenUltraSAST findings from opencode.
+
+## Triage Loop
+
+1. Identify the finding, path, rule, severity, confidence, and evidence level.
+2. Separate deterministic evidence from model assumptions.
+3. Check attacker control, reachability, sanitizer behavior, duplicates, impact, and contradictory evidence.
+4. If rejected or unresolved, record the false-positive reason and scope.
+5. Prefer scoped demotion over deleting a vulnerability class globally.
+6. Feed the outcome into ranking calibration and prompt constraints.
+
+## False-Positive Reasons
+
+- `unreachable_path`
+- `missing_attacker_control`
+- `sanitizer_disproved`
+- `static_rule_mismatch`
+- `incorrect_model_assumption`
+- `duplicate`
+- `insufficient_impact`
+- `unsupported`
+- `contradicted`
+- `unverified`
+
+## Decision Standard
+
+If evidence is uncertain, mark the finding as requiring next evidence instead of escalating severity. Difficult or high-impact disagreements should trigger fusion/deeper reasoning when available.