fix(skill-release): report SkillSpector scans on PRs

[davida-ps]

User description

Summary

• Remove the extra ### SkillSpector Security Report wrapper heading from generated release notes so future releases only show the report's own title.
• Run the PR release dry-run for any release-relevant skills/*/** change, not only skill.json / SKILL.md changes.
• Upload report-only SkillSpector artifacts and add a separate PR comment job that creates or updates one report comment per changed skill.
• Add workflow assertions for the release-body heading behavior and PR comment automation.

Testing

• node scripts/test-skill-release-workflow.mjs
• for test_file in scripts/test-skill-*.mjs; do node "$test_file"; done
• YAML parse check
• git diff --check

---

Generated description

Below is a concise technical summary of the changes proposed in this PR:
Update validate-pr-version-sync, the release dry-run job, and comment-skillspector-report so SkillSpector scans fire on any skills/*/** change, upload sanitized artifacts, and let release notes reuse the scanner’s own heading. Document the refreshed SkillSpector release evidence flow in wiki/modules/automation-release.md and related workflow docs while keeping the vite/@vitejs/plugin-react tooling dependencies current.

Topic	Details
Skill release flow	Handle release validation, dry-run builds, and PR comment automation by broadening file change detection, staging per-skill SkillSpector artifacts, and sanitizing release comments while letting release notes use the scanner’s title. Modified files (2) .github/workflows/skill-release.yml scripts/test-skill-release-workflow.mjs Latest Contributors(0) User Commit Date
Docs & tooling	Document the SkillSpector evidence and release behavior in workflow/docs and refresh vite/@vitejs/plugin-react dependencies to keep the tooling current. Modified files (8) package-lock.json package.json wiki/dependencies.md wiki/glossary.md wiki/i18n/translation-tracker.md wiki/modules/automation-release.md wiki/security-signing-runbook.md wiki/workflow.md Latest Contributors(0) User Commit Date

_{Review this PR on Baz | Customize your next review}