refactor(skills): extract evaluation and audit orchestration (#6711)

* refactor(skills): extract evaluation and audit orchestration

* chore(security): scope OpenAPI digest Gitleaks exception

* refactor(skills): establish domain-oriented service boundaries

* refactor(skills): address architecture review feedback

* fix(skills): restore prompt seams and harden signature contracts

* test(skills): restore ReDoS coverage and simplify API baseline

.gitleaks.toml

@@ -21,3 +21,17 @@ regexes = [
   '''^inherits_2\.0\.1$''',
   '''^inherits_2\.0\.3$''',
 ]
+
+
+[[allowlists]]
+description = "Reviewed Skills OpenAPI baseline SHA-256 digest"
+targetRules = ["generic-api-key"]
+condition = "AND"
+paths = [
+  '''(?:^|/)tests/fixtures/skills_api_baseline\.json$''',
+  '''(?:^|/)docs/skills-audit-architecture\.md$''',
+]
+regexTarget = "secret"
+regexes = [
+  '''^7abc5b334a6c3c52dd3eba15d8bc516da728a67f14fb7f56d0bb5992d89a16ca$''',
+]