fix: React migrate path remapping, UI smoke test, and skill routing

[aswin-shakthic]

Summary

Follow-up fixes from React Meta (MP-44662) manual testing — addresses migrate UI failures and unclear skill handoff for review/publish.

Changes:

• /fdk-react-migrate — require /app/... route remapping, multi-location HTML checks, and mandatory fdk run UI smoke test before marking migrate complete
• js-to-react-migration-checklist.md — same migrate gates
• post-generation-message.txt + SKILL.md — explicit routing: review → fw-review, pack/publish → fw-publish (not generic AI review or raw FDK docs)
• Regex eval — new test asserting migrate docs cover path remapping + smoke test

Related: builds on PR #55 (React Meta default UI stack).

Type of change

• Skill content (SKILL.md, command file, rule file)
• Reference / template file
• Plugin manifest (.claude-plugin, .cursor-plugin, .codex-plugin, skills/*/.cursor-plugin)
• Installer (installer/)
• Test suite (tests/, installer/tests/)
• CI / docs / infra only

---

Test checklist

Installer tests (required when installer/ changed)

cd installer && npm install && npm test    # installer lifecycle tests

• Installer tests pass locally — N/A (installer/ unchanged)

Static + regex evals (required for all PRs)

cd tests && npm install && npm test        # static + parser + regex evals — runs in CI

• All tests pass locally — 403 pass, 0 fail, 1 skipped

LLM evals (required when SKILL.md, a command file, or .meta.template.json is modified)

See When to run which layer in tests/TESTING.md.

• Reviewed / updated scenarios — no new LLM scenarios; regex coverage added for migrate path/smoke-test docs
• Added new scenario(s) for any new behavioral rule or gate — deferred (doc/command tightening only)
• LLM eval scenarios pass — not re-run for this small follow-up
• Attached tests/all-tests-report.html

Repo hygiene (when applicable)

• AGENTS.md — N/A (no rules/commands inventory change)
• tests/TESTING.md — N/A (no scenario count change)
• docs/engine-matrix.md — N/A
• node scripts/bump-version.mjs — N/A

Security

• No secrets, tokens, or real credentials in the diff
• No dependency changes — audit N/A

Not applicable

• This PR does not modify skills, commands, or templates — LLM eval checklist skipped
• This PR does not change installer/ — installer test checklist skipped
• This PR does not add or change dependencies — audit checklist skipped

---

CI (runs on PR automatically)

Check	What
Static + regex eval tests	tests/npm test
Installer tests	installer/npm test (Node 24)
Dependency review	New deps — high/critical CVEs blocked
npm audit	installer/ + tests/ lockfiles
Secret scan	gitleaks (full git history)
CodeQL	Org-level (if enabled)

LLM evals and tests/e2e/e2e.sh are local / agent session only — not in CI.

---

Eval report

Regex eval only for this PR (+1 test: fdk-react-migrate requires route remapping and fdk run smoke test). Full LLM eval not re-run.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None