feat(core,cli): harden install engine and extend skill lint and interview eval

- update only touches the recorded project root; project installs do not
  follow symlinks or junctions; repeated --force rotates .orig backups;
  uninstall never deletes outside the recorded root
- run npm/npx without a shell on Windows and pin optional tool versions
- skip the update check in CI and non-interactive output
- lint: cross-document section pointers, preflight row ids, gate rule
  numbers, per-document size budgets, gate copy equality
- eval: scenarios S19-S21, route and read-cost rejudging, interpretation
  card judging, temp-dir previews and table-form cards no longer fail

build/eval/interview/test/transcripts/codex-s14-no-trigger.jsonl

@@ -0,0 +1,6 @@
+{"type":"thread.started","thread_id":"th-1"}
+{"type":"item.completed","item":{"type":"command_execution","command":"cat form.js"}}
+{"type":"item.completed","item":{"type":"file_change","changes":[{"path":"form.js","kind":"update"}]}}
+{"type":"item.completed","item":{"type":"agent_message","text":"정규식 끝의 잘못된 x 를 지웠습니다."}}
+{"type":"eval_turn_end","filesChanged":["form.js"]}
+[stderr] 2026-10-02 warn: noise line that is not JSON