fix: close install manifest packaging gaps (#2172)

- commands-core now ships scripts/harness-audit.js and scripts/skills-health.js:
  the module installs the whole commands/ dir, so /harness-audit and
  /skill-health were installed without their backing engines on
  manifest-driven installs (the original 1.10.0 failure mode)
- agentic-patterns now ships scripts/claw.js: the module installs the
  nanoclaw-repl skill, whose workflow operates scripts/claw.js
- package.json files array gains scripts/skills-health.js so the npm publish
  surface stays aligned with the module graph (claw.js and harness-audit.js
  were already listed)
- orchestration drops commands/multi-workflow.md and commands/sessions.md
  from its explicit paths: both are already shipped by commands-core, which
  is a declared dependency of the module, so the duplicate ownership produced
  two copy operations per destination in install-state. The two scripts/lib
  entries are kept because hooks-runtime is NOT a declared dependency and a
  standalone orchestration install still needs them

manifests/install-modules.json

@@ -53,7 +53,9 @@
       "kind": "commands",
       "description": "Core slash-command library and command docs.",
       "paths": [
-        "commands"
+        "commands",
+        "scripts/harness-audit.js",
+        "scripts/skills-health.js"
       ],
       "targets": [
         "claude",
@@ -560,8 +562,6 @@
       "kind": "orchestration",
       "description": "Worktree/tmux orchestration runtime and workflow docs.",
       "paths": [
-        "commands/multi-workflow.md",
-        "commands/sessions.md",
         "scripts/lib/orchestration-session.js",
         "scripts/lib/tmux-worktree-orchestrator.js",
         "scripts/orchestrate-codex-worker.sh",
@@ -619,6 +619,7 @@
       "kind": "skills",
       "description": "Agentic engineering, autonomous loops, agent harness construction, and LLM pipeline optimization skills.",
       "paths": [
+        "scripts/claw.js",
         "skills/agent-architecture-audit",
         "skills/agent-harness-construction",
         "skills/agentic-engineering",

package.json

@@ -94,6 +94,7 @@
     "scripts/preview-pack-smoke.js",
     "scripts/release-approval-gate.js",
     "scripts/release-video-suite.js",
+    "scripts/skills-health.js",
     "scripts/hooks/",
     "scripts/install-apply.js",
     "scripts/install-plan.js",

tests/scripts/npm-publish-surface.test.js

@@ -47,7 +47,6 @@ function buildExpectedPublishPaths(repoRoot) {
     "scripts/ci/supply-chain-advisory-sources.js",
     "scripts/consult.js",
     "scripts/control-pane.js",
-    "scripts/claw.js",
     "scripts/discussion-audit.js",
     "scripts/doctor.js",
     "scripts/status.js",
@@ -66,7 +65,6 @@ function buildExpectedPublishPaths(repoRoot) {
     "scripts/skill-create-output.js",
     "scripts/repair.js",
     "scripts/harness-adapter-compliance.js",
-    "scripts/harness-audit.js",
     "scripts/session-inspect.js",
     "scripts/uninstall.js",
     "scripts/gemini-adapt-agents.js",