zion-reviewlisted

# Zion review The rubric is `.github/skills/code-review/SKILL.md`. Read it first and apply all of it. This skill adds only what a session with a shell can do. 1. **Get the diff.** PR number: fetch it through the GitHub MCP tools. Otherwise diff the branch against `main`. List every changed file and hunk (rubric, "Scope"). 2. **Run every `run:` step in `.github/workflows/validate.yml`**, with the PR's base branch as the changelog base (`main` when there is no PR). Name any you cannot run (a missing `shellcheck` or `npm`). A red check is Blocking. 3. **Reproduce every hook finding.** Build the payload with the helpers in `tests/hooks/lib.sh` (`payload_bash`, `payload_file`, ...) and pipe it into the hook named in the finding. No wrong verdict, no Blocking finding. 4. **Check new tests pin something**: run the changed suite against the base version of every changed hook file, `hooks/lib/` included. A new case that still passes is a Warning. 5. **Report** in the rubric's format, most severe first. Post to GitHub only when asked.