Package self-contained public skill bundle

[xiaojiou176]

What changed

• turn the CortexPilot public skill bundle into a self-contained package instead of a thin router that depends on repo-local docs
• add bundle-local install guidance, tool map, and example-task references
• update the ClawHub manifest to reflect the live ClawHub listing and the published MCP package path

Why

• public skills should teach the agent the published MCP install path, the stable tool map, and the safe-first workflow without referencing files outside the bundle
• the same package is now more consistent with the live ClawHub listing and the public read-only MCP surface

Verification

• python3 scripts/check_root_allowlist.py
• printf ... | uvx --from cortexpilot-orchestrator==0.1.0a4 cortexpilot-readonly-mcp
• npx -y clawhub publish ... cortexpilot-adoption-router@1.1.0
• npx -y clawhub inspect cortexpilot-adoption-router --json