Skill catalog has drifted: several skills are missing from CI validation, router, and eval coverage #97

Summary

Three separate gaps, all with the same root cause — new skills got added to skills/ without updating the other places that track the full skill list:

A. CI's skills-ref validate step only covers 10 of 18 skills

.github/workflows/ci.yml hardcodes 10 skill names. Missing: blueprint, wp-abilities-audit, wp-abilities-verify, wp-patterns, wp-phpstan, wp-plugin-directory-guidelines, wp-rest-api, wpds. Nearly half the skill set ships with no external schema validation in CI.

B. Router decision tree doesn't route to 5 existing skills

skills/wordpress-router/references/decision-tree.md has no entry for wpds, wp-abilities-audit, wp-abilities-verify, wp-plugin-directory-guidelines, or wp-patterns — all real, shipped skills listed in the README. It also routes "security" intent to a wp-security (planned) skill that doesn't exist, even though wp-plugin-development already covers that ground.

C. wpds has zero eval scenarios

No file in eval/scenarios/*.json mentions wpds, violating the authoring guide's own golden rule ("Don't add a new skill without at least one scenario in eval/scenarios/").