refactor(skills): extract evaluation and audit orchestration (#6711)

* refactor(skills): extract evaluation and audit orchestration

* chore(security): scope OpenAPI digest Gitleaks exception

* refactor(skills): establish domain-oriented service boundaries

* refactor(skills): address architecture review feedback

* fix(skills): restore prompt seams and harden signature contracts

* test(skills): restore ReDoS coverage and simplify API baseline

services/skills/dependencies.py

@@ -0,0 +1,35 @@
+"""Explicit collaborators for execution and audit coordination.
+
+The transport compatibility bindings supply the original patchable functions.
+Services never import the skills transport module or copy credentials into a
+second state store.
+"""
+from dataclasses import dataclass
+from typing import Callable
+
+
+@dataclass(frozen=True)
+class AuditDependencies:
+    test_jobs: dict
+    audit_jobs: dict
+    test_task: Callable
+    test_messages: Callable
+    baseline_messages: Callable
+    evaluate_run: Callable
+    evaluate_necessity: Callable
+    evaluate_retrieval_precision: Callable
+    should_check_retrieval_precision: Callable
+    improve_markdown: Callable
+    apply_markdown: Callable
+    duplicate_blocker: Callable
+    finalize_status: Callable
+    finalize_batch: Callable
+    auto_publish_policy: Callable
+    utility_blocker: Callable
+    verdict_efficiency: Callable
+    run_test_job: Callable
+    run_arm: Callable
+    run_test_once: Callable
+    audit_one: Callable
+    run_batch: Callable
+    resolve_models: Callable