TASK-IMP-147: Ingest inspect-harden

Summary

Bring the inspect-harden package into CyberOS as four first-class skills (inspection-report-author/audit, harden-record-author/audit), fix the known harden-plan.mjs operator_prerequisites defect, wire /inspect and /harden for Claude plugin and native shared skills, and clarify that ship-tasks "harden a task" (class: improvement) is not /harden (inspection remediation).

Problem

Inspection → remediation lived as an external package. CyberOS had no vendored skills, no slash commands, and conductor language that overloaded "harden" with improvement-class shipping. The planner also misclassified findings that declare operator_prerequisites (shopass INS-F-0002).

Proposed Solution

1. Ingest four skill trees under modules/skill/ to the author/audit floor.
2. Align ledger contract for spec ≥1.2 to 75 disciplines; keep 1.0 goldens valid.
3. Fix harden-plan.mjs + extend harden-plan-check.sh.
4. Scaffold harden-record-audit (RUBRIC / AUDIT_LOOP / REPORT_FORMAT / triggers).
5. Vendor + pair-parity SCOPE + census 52→56; plugin commands; SHARED_CMDS; CLI stubs.
6. Conductor docs: ship-tasks §1a "Not /harden" note; plugin skill + help.

Non-goals

• Applying shopass patch to a live target.
• MCP tools for inspect/harden.
• Merging /harden into /ship-tasks.
• Committing package-root reports/ / evidence/ as runtime.

Success Metrics

• inspect-lint --selftest green; all acceptance goldens lint clean.
• harden-plan-check.sh PASS including shopass INS-F-0002 non-agent.
• build.sh + pair-parity + channel tests green; census 56.
• Task remains non-done until human HITL.