fix: add word boundary to dev server hook regex, fix box() crash, add 27 tests

- hooks.json: add \b word boundary anchors to dev server blocking regex
  to prevent false positives matching "npm run develop", "npm run devtools" etc.
- skill-create-output.js: guard box() horizontal repeat with Math.max(0, ...)
  to prevent RangeError when title exceeds container width
- Add 13 tests for setup-package-manager.js CLI argument parsing
- Add 14 tests for skill-create-output.js SkillCreateOutput class
- All 333 tests passing

tests/run-all.js

@@ -17,7 +17,9 @@ const testFiles = [
   'lib/session-aliases.test.js',
   'hooks/hooks.test.js',
   'integration/hooks.test.js',
-  'ci/validators.test.js'
+  'ci/validators.test.js',
+  'scripts/setup-package-manager.test.js',
+  'scripts/skill-create-output.test.js'
 ];
 
 console.log('╔══════════════════════════════════════════════════════════╗');