docs: sync PRs #1062-#1073 to aeon docs

[aaronjmars]

Syncs merged aeonfun/aeon PRs #1062-#1073 into the aeon repo docs. Source of truth = merged PRs; this propagates what shipped.

PR window

#1062-#1073. Skips the prior run's own docs-sync PRs #1063 (docs: sync #1042-#1061) and #1064 (its skill-count follow-up) - already reflected in the repo; their 44 of 81 fix now rides forward into the website mirror in the paired PR.

Catalog count: 81 to 82

#1072 added the sc-audit skill (Dev & Code) but did not bump the setup-skill / plugin literal counts, and left two stale cells in docs/skill-packs.md's summary table. Reconciled against catalog/skills.json (total: 82) and catalog/packs.json (Core 12, Evolution 9, Basics 18, Dev 13, Crypto 19, Productivity 11 = 82).

Surfaces changed

• .claude/skills/aeon/** + byte-identical plugin/skills/aeon/** - literal counts 81 to 82 (footers 82 skills · 1 enabled, pack breakdown Dev (13), survey stats re-derived: 44 of 82 leads-with, 65 of 82 run-log, all 82 skills). Plugin transform intact (5 CLAUDE_PLUGIN_ROOT, 0 .claude/skills/aeon).
• docs/skill-packs.md - summary "The packs" table was stale: Dev & Code 12 to 13 (feat(sc-audit): add smart-contract audit skill #1072) and Crypto & Markets 17 to 19 (never bumped from Add miroshark-matchday skill: weekly bulk football matchday sims + video handoff #1056). Full-catalog table + anchor already correct at 82.
• CHANGELOG.md [Unreleased] - Keep-a-Changelog block for this batch (Added / Changed / Fixed / Maintenance).

Signal PRs documented

• feat(sc-audit): add smart-contract audit skill #1072 new sc-audit smart-contract audit skill (catalog 81 to 82)
• feat(dev-loop): add one verified repair pass #1070 dev-loop one verified repair pass
• feat(vuln-scanner): harden disclosure routing (A5.0 SECURITY.md-first, A5b.0 PVR preflight) #1073 vuln-scanner disclosure routing hardened (SECURITY.md-first + PVR preflight)
• fix(dashboard): escape MCP OAuth callback HTML to prevent reflected XSS #1066 dashboard MCP OAuth callback reflected-XSS fix (GHSA-gh95-xx4q-qch8)
• fix(mcp-server): close Riva shadow-mode isolation gap on the MCP dispatch path #1067 Riva shadow-mode isolation gap on the MCP dispatch path
• fix(feature): scope Aeon watermark to dev-loop test runs only #1069 Aeon PR watermark scoped to dev-loop self-test runs
• feat(miroshark-matchday): vertical 9:16 render path in the local video step #1062 miroshark-matchday vertical 9:16 render path
• fix(ecosystem): refresh HivemindOS avatar, drop dead Spoon row #1071 ecosystem: refresh HivemindOS avatar, drop dead Spoon row

Bundled as Maintenance (noise)

• ci: add always-on CI Gate for branch protection #1065 always-on CI Gate for branch protection
• fix(vuln-scanner): rephrase curl-pipe-to-shell mentions to clear the eyebrow RCE gate #1068 vuln-scanner prose rephrase to clear the eyebrow RCE gate

Not a website-mirror trigger

#1071's ecosystem change edits docs/ECOSYSTEM.md only; aeon.fun/ecosystem parses that file hourly, so no website data edit is needed.