feat(core,cli): harden install engine and extend skill lint and interview eval

- update only touches the recorded project root; project installs do not
  follow symlinks or junctions; repeated --force rotates .orig backups;
  uninstall never deletes outside the recorded root
- run npm/npx without a shell on Windows and pin optional tool versions
- skip the update check in CI and non-interactive output
- lint: cross-document section pointers, preflight row ids, gate rule
  numbers, per-document size budgets, gate copy equality
- eval: scenarios S19-S21, route and read-cost rejudging, interpretation
  card judging, temp-dir previews and table-form cards no longer fail

build/eval/interview/fixtures/s19-code-language-no-design-md/styles/tokens.css

@@ -0,0 +1,15 @@
+:root {
+  --color-bg: #f7f5f0;
+  --color-surface: #ffffff;
+  --color-ink: #1f2421;
+  --color-ink-muted: #5b635e;
+  --color-line: #d9d5cb;
+  --color-accent: #2f6f4f;
+  --font-display: "Gowun Batang", serif;
+  --font-body: "Pretendard", system-ui, sans-serif;
+  --space-2: 8px;
+  --space-4: 16px;
+  --space-8: 32px;
+  --space-16: 64px;
+  --radius-control: 6px;
+}