fix: restore portable Bootstrap skill discovery with preserved DCO

[jmcte]

Summary

• Restore discoverable name/description metadata for the portable Bootstrap checklist skill.
• Verify home sync preserves the metadata and remains idempotent.

Governing Issue

Refs #164. This draft carries the same original contribution on current main without #164's merge commit missing DCO sign-off. That merge commit has a verified cryptographic signature, which is separate from DCO. This draft preserves the original author's existing Signed-off-by trailer; it does not retroactively attest that merge commit. No separate issue: explicitly authorized maintenance repair.

Validation

• Relevant local checks passed: npm run typecheck; npm test -- tests/home-sync.test.ts --maxWorkers=2 --minWorkers=1 (3 passed); git diff --check.
• Agent-authored changes passed autoreview against the intended base with no accepted/actionable findings.
• Autoreview command and result: autoreview --mode branch --base 5db3a87784d9833ebabf9415ca63f56089ae3b2c --model gpt-6-astra --thinking medium --no-web-search; clean, no accepted/actionable findings.
• Required PR checks must be observed after publication and any later readiness transition.
• Skipped checks: full suite was not repeated for this two-file metadata/test-only restoration; focused home-sync test and typecheck passed with this branch's locked dependencies.

Bootstrap Governance

• Scope is the explicitly approved discovery repair.
• No contributor-policy behavior changed.
• Auto-merge intentionally disabled: JT explicitly prohibits merging or enabling auto-merge for this batch.
• No real secrets, runtime auth, or machine-local env files committed.

Material change: no

Merge Automation

• Keep draft; do not enable auto-merge or merge. Original fix: restore portable Bootstrap skill discovery #164 remains unchanged pending maintainer disposition.

Notes

Original contribution: 86b77a8, author John McChesney TenEyck Jr, existing author sign-off retained by normal cherry-pick. Replacement committer: Codex agent codex-agent@localhost. Current preparation/validation/autoreview used GPT-6 Astra, medium. Historical author-model provenance remains unknown and is not attested here. Independent reviewer qualification must be resolved before any later approval.

Low risk: frontmatter plus focused regression assertion; no provisioning or runtime behavior change.