feat(core,cli): harden install engine and extend skill lint and interview eval

- update only touches the recorded project root; project installs do not
  follow symlinks or junctions; repeated --force rotates .orig backups;
  uninstall never deletes outside the recorded root
- run npm/npx without a shell on Windows and pin optional tool versions
- skip the update check in CI and non-interactive output
- lint: cross-document section pointers, preflight row ids, gate rule
  numbers, per-document size budgets, gate copy equality
- eval: scenarios S19-S21, route and read-cost rejudging, interpretation
  card judging, temp-dir previews and table-form cards no longer fail

build/eval/interview/test/transcripts/claude-s7-writes-fail.ndjson

@@ -0,0 +1,5 @@
+{"type":"system","subtype":"init","session_id":"sess-1","tools":["Read","Write","Edit","Bash","Skill"],"model":"claude-sonnet"}
+{"type":"assistant","message":{"content":[{"type":"tool_use","id":"tu_24","name":"Skill","input":{"skill":"designpaca"}}]}}
+{"type":"assistant","message":{"content":[{"type":"tool_use","id":"tu_25","name":"Bash","input":{"command":"npm i -D axe-core"}}]}}
+{"type":"assistant","message":{"content":[{"type":"text","text":"리뷰 결과: 대비가 부족합니다."}]}}
+{"type":"eval_turn_end","filesChanged":["package.json","package-lock.json"]}