ci: add HOL skill-publish validate workflow

[internet-dot]

I opened this as a small validate-only check for the skill metadata in the repo.

A couple of repo-specific details I checked first:

• Scan for poisoned MCP servers. Reclaim wasted context tokens. Disable MCP servers per-project. Find and delete duplicate memories. Move misplaced configs where they belong
• Scan → See every memory, skill, MCP server, rule, command, agent, hook, plugin, plan, and session across all projects. One view
• Find → Show Effective reveals what Claude actually loads per project. Context Budget shows what's eating your tokens. Security Scanner shows what's poisoning your tools

This adds one workflow for . and leaves the runtime code alone.
It only runs the schema and trust checks for the skill metadata in validate mode.

If you would rather place the workflow under a different filename or point it at a different skill directory, I can adjust the branch.