chore: import upstream snapshot with attribution

.github/workflows/check-divisions.yml

@@ -0,0 +1,20 @@
+name: Check Divisions Consistency
+
+# Runs on every PR (no path filter on purpose): a new division directory must
+# trip this check even when nobody touched divisions.json or the lint config.
+on:
+  pull_request:
+  push:
+    branches: [main]
+
+jobs:
+  check-divisions:
+    name: divisions.json is the single source of truth
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Validate division set
+        run: |
+          chmod +x scripts/check-divisions.sh
+          ./scripts/check-divisions.sh

.github/workflows/check-runbooks.yml

@@ -0,0 +1,21 @@
+name: Check Runbooks Consistency
+
+# Runs on every PR (no path filter on purpose): renaming or removing an agent
+# must trip this check even when nobody touched strategy/runbooks.json, since a
+# dangling roster slug breaks the app's one-click team deploy.
+on:
+  pull_request:
+  push:
+    branches: [main]
+
+jobs:
+  check-runbooks:
+    name: runbook rosters reference real agent slugs
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Validate runbook rosters
+        run: |
+          chmod +x scripts/check-runbooks.sh
+          ./scripts/check-runbooks.sh

.github/workflows/check-tools.yml

@@ -0,0 +1,20 @@
+name: Check Tools Consistency
+
+# Runs on every PR (no path filter on purpose): a new or renamed tool must trip
+# this check even when nobody touched tools.json or the install/convert scripts.
+on:
+  pull_request:
+  push:
+    branches: [main]
+
+jobs:
+  check-tools:
+    name: tools.json is the single source of truth
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Validate tool set
+        run: |
+          chmod +x scripts/check-tools.sh
+          ./scripts/check-tools.sh

.github/workflows/lint-agents.yml

@@ -0,0 +1,66 @@
+name: Lint Agent Files
+
+on:
+  pull_request:
+    paths:
+      - "academic/**"
+      - "design/**"
+      - "engineering/**"
+      - "finance/**"
+      - "game-development/**"
+      - "gis/**"
+      - "healthcare/**"
+      - "marketing/**"
+      - "paid-media/**"
+      - "sales/**"
+      - "security/**"
+      - "product/**"
+      - "project-management/**"
+      - "testing/**"
+      - "support/**"
+      - "spatial-computing/**"
+      - "specialized/**"
+
+jobs:
+  lint:
+    name: Validate agent frontmatter and structure
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Get changed agent files
+        id: changed
+        run: |
+          FILES=$(git diff --name-only --diff-filter=ACMR origin/${{ github.base_ref }}...HEAD -- \
+            'academic/**/*.md' 'design/**/*.md' 'engineering/**/*.md' 'finance/**/*.md' 'game-development/**/*.md' 'gis/**/*.md' 'healthcare/**/*.md' 'marketing/**/*.md' 'paid-media/**/*.md' 'sales/**/*.md' 'security/**/*.md' 'product/**/*.md' \
+            'project-management/**/*.md' 'testing/**/*.md' 'support/**/*.md' \
+            'spatial-computing/**/*.md' 'specialized/**/*.md')
+          {
+            echo "files<<ENDOFLIST"
+            echo "$FILES"
+            echo "ENDOFLIST"
+          } >> "$GITHUB_OUTPUT"
+          if [ -z "$FILES" ]; then
+            echo "No agent files changed."
+          else
+            echo "Changed files:"
+            echo "$FILES"
+          fi
+
+      - name: Run agent linter
+        if: steps.changed.outputs.files != ''
+        env:
+          CHANGED_FILES: ${{ steps.changed.outputs.files }}
+        run: |
+          chmod +x scripts/lint-agents.sh
+          ./scripts/lint-agents.sh $CHANGED_FILES
+
+      - name: Check agent originality
+        if: steps.changed.outputs.files != ''
+        env:
+          CHANGED_FILES: ${{ steps.changed.outputs.files }}
+        run: |
+          chmod +x scripts/check-agent-originality.sh
+          ./scripts/check-agent-originality.sh $CHANGED_FILES