…and hook schema updates (#30)

* feat: add CSV reporters, CI linting, EPUB agents, and ecosystem enhancements

- Enhancement 1: Register EPUB agents in both AGENTS.md files with new EPUB team
- Enhancement 2: Create 5 missing Claude agents (epub-scan-config, cognitive-accessibility, design-system-auditor, epub-accessibility, mobile-accessibility)
- Enhancement 3: Wire CSV reporters into all 4 wizard agents (web + document, both platforms)
- Enhancement 4: Add markdown-csv-reporter agents, export-markdown-csv prompt, and documentation
- Enhancement 5: Add markdown-a11y-lint.mjs CI script and markdown-lint workflow job

New files: 23 (agents, prompts, docs, CI script, skill)
Modified files: 14 (AGENTS.md, wizards, instructions, workflow, docs)

* fix: align rule IDs to canonical format agents and add gap analysis rules

- Aligned DOCX/XLSX/PPTX rule tables in both CSV reporters (Copilot + Claude) to canonical format agent IDs
- Fixed Warning weight from 3 to 5 in Copilot CSV reporter ROI calculation
- Added 5 new rules from Microsoft Accessibility Checker gap analysis:
  - DOCX-E008 (document-access-restricted/IRM)
  - DOCX-E009 (content-controls-without-titles)
  - XLSX-E007 (red-negative-numbers)
  - XLSX-E008 (workbook-access-restricted/IRM)
  - PPTX-E007 (presentation-access-restricted/IRM)
- Updated format agents (word/excel/powerpoint-accessibility) with new rules
- Updated office-scan-config agents with new rules
- All rule IDs now consistent across format agents, CSV reporters, help-url-reference, and accessibility-rules SKILL

* fix: complete code review fixes (34/34 findings resolved)

High severity (previously fixed):
- H-01: Manifest-based uninstall (prevents deleting user files)
- H-02: ReDoS-resistant bounded regex patterns
- H-03: ZIP bomb protection (200MB limit)
- H-04: ZIP64 archive detection

Medium severity:
- M-01: validateFilePath write-mode enforcement at all 9 call sites
- M-02: cd exit guard in install.sh embedded updater
- M-03: ExecutionPolicy Bypass changed to RemoteSigned
- M-04: Multi-line HTML tag limitation documented in a11y-lint
- M-05: BOM-aware YAML front matter detection in markdown lint
- M-06: Expanded emoji regex to cover supplemental/flag sequences
- M-07: Removed stale path reference (previously fixed)
- M-08: git clone error handling in install.ps1 and install.sh
- M-09: PDFQ.REPO.NO_SCANNED_ONLY guarded against duplicate with PDFBP.TEXT.EXTRACTABLE
- M-10: Title regex escaped parens (previously fixed)

Low severity:
- L-01: PS 5.1-compatible null-coalescing in 4 hook scripts
- L-02: Dead imports removed (previously fixed)
- L-03: lstatSync + symlink skip in all 4 lint/scan scripts
- L-04: Link regex handles nested elements in a11y-lint
- L-05: XML regex parsing limitations documented
- L-06: Array.isArray checks (previously fixed)
- L-08: JSON-safe string escaping in a11y-team-eval.sh
- L-09: Hex format hints on contrast task inputs
- L-10: Removed unused documentPath input from tasks.json
- L-11: cd exit guards in update.sh
- L-12: Skipped (JSON does not support comments)

Informational:
- I-01: Zod semver range fixed to ^3.25.0
- I-02: WCAG 2.1 to 2.2 in manifest.json (3 locations)
- I-03: WCAG 2.1 to 2.2 in index.js (5 locations)
- I-04: Empty catch blocks annotated in lint scripts
- I-05: Concurrent processing opportunity noted
- I-06: message.split fallback for messages without periods (5 locations)
- I-07: Intentional anti-pattern banners in example files
- I-08: Shared code duplication documented between lint scripts

* fix: update hook schema to hookSpecificOutput and increase timeouts

- Flatten Claude settings.json hook structure (remove nested hooks array)
- Add Windows-specific command paths to Claude hooks
- Migrate hook scripts from stopReason/systemMessage to hookSpecificOutput pattern
- Increase hook timeouts from 5-10s to 10-15s for reliability
- Add hookEventName metadata to all hook JSON responses
- Update cross-platform handoff documentation
- Add audit sessions log

* fix: address PR review findings (#1-#4)

- #1: gitignore .github/audit/ and remove sessions.log from tracking
- #2: restore PreToolUse matcher (Bash|mcp_github) to scope safety gate
- #3: migrate install.sh, install.ps1, uninstall.sh to flat hook schema
- #4: annotate WCAG 2.4.13 Focus Appearance as (AAA) in CLAUDE.md and copilot-instructions.md

* feat: add multi-agent reliability engineering and remove hooks

Apply principles from GitHub blog article on multi-agent workflow
reliability across the entire agent ecosystem.

## Hook Removal
- Delete all hook files (.claude/hooks/, .github/hooks/)
- Remove hook references from 60+ documentation files
- Clean .claude/settings.json
- Remove hook setup from install/uninstall/update scripts

## Multi-Agent Reliability
- Create multi-agent-reliability.instructions.md
- Add reliability standards to both AGENTS.md manifests
- Add structured output contracts to 12 orchestrator files
- Add output contracts + handoff transparency to 26 sub-agent files
- Add handoff transparency sections to 21 custom prompt files

## Instruction Strengthening
- Add Context Discovery, Audit Report Quality Requirements,
  and Automatic Trigger Detection to CLAUDE.md and
  copilot-instructions.md
- Replace SESSION CONTEXT references with workspace context

## CI Fixes
- Fix a11y-lint.mjs and markdown-a11y-lint.mjs for CI workflow

All linters pass with 0 errors.

* fix: add missing YAML front matter to skill files

Ran skills and got errors - four SKILL.md files were missing YAML
front matter (name + description). Added front matter to:
- cognitive-accessibility/SKILL.md
- design-system/SKILL.md
- markdown-accessibility/SKILL.md
- mobile-accessibility/SKILL.md

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* docs: add one-liner uninstall to README

Mirrors the one-liner install section with curl/irm equivalents
for uninstall on macOS/Linux and Windows.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: taylorarndt <taylor@techopolis.online>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>