feat(core,cli): harden install engine and extend skill lint and interview eval

- update only touches the recorded project root; project installs do not
  follow symlinks or junctions; repeated --force rotates .orig backups;
  uninstall never deletes outside the recorded root
- run npm/npx without a shell on Windows and pin optional tool versions
- skip the update check in CI and non-interactive output
- lint: cross-document section pointers, preflight row ids, gate rule
  numbers, per-document size budgets, gate copy equality
- eval: scenarios S19-S21, route and read-cost rejudging, interpretation
  card judging, temp-dir previews and table-form cards no longer fail

packages/cli/src/commands/uninstall.ts

@@ -17,6 +17,7 @@ export async function runUninstall(opts: {
   }
 
   console.log(heading(opts.dryRun ? "제거 계획" : "제거"));
+  let code = 0;
   for (const rec of targets) {
     const res = await removeInstall(rec, { force: opts.force, dryRun: opts.dryRun });
     const verb = opts.dryRun ? "제거할 파일" : "제거";
@@ -28,6 +29,13 @@ export async function runUninstall(opts: {
       );
       for (const p of res.keptModified.slice(0, 5)) console.log(dim(`    ${tildify(p)}`));
     }
+    if (res.refused.length > 0) {
+      code = 1;
+      console.log(
+        warn(`  설치 기록과 맞지 않아 손대지 않은 파일 ${res.refused.length}개 (기록 밖 경로·링크·꼬인 마커)`),
+      );
+      for (const p of res.refused.slice(0, 5)) console.log(dim(`    ${tildify(p)}`));
+    }
   }
-  return 0;
+  return code;
 }