chore(claude): track shared subagents, release skill, format hook

The repo's safety contract and release format already live in
AGENTS.md as prose. Promoting the high-leverage subset to agents/,
skills/, and a hook makes them executable instead of remembered.
.claude/*.local.json stays gitignored so personal config is
unaffected.