fix(privacy): scrub client name + private memory-file slugs the first pass missed

The audit found two gaps the original marker list did not cover:

- A client name (WAGMI) was live on main in step-2/ghostty-install.sh and
  CHANGELOG.md, naming that client's team as the people who hit an install bug.
  The CHANGELOG entry also cited a private memory-file slug.
- Six references to private memory-file slugs (feedback_*/reference_*) sat inside
  skills the installers write to a recipient's ~/.claude/skills/ — pointing a
  stranger's assistant at a memory store it has no access to, and disclosing the
  naming of that store.

Replaced all of them with the plain-English rule they were citing, which is what
a recipient can actually act on.

The gate's private marker list (held outside this repo, per scripts/check-pii.sh)
gained the full client/project roster plus a memory-slug pattern, so both classes
now fail the build. The user_ prefix is deliberately excluded from that pattern:
it collides with 'user_invocable' skill frontmatter.

Author: fidgetcoding

CHANGELOG.md

@@ -46,7 +46,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 - Step 6 — Telegram bot token file is written inside a `umask 077` subshell so it is born `0600` (no permissive-umask window before the chmod).
 - Step 7 — corrected the comment that claimed the GitHub PAT is "never in `ps` output" (it is briefly visible in the local process list while `claude mcp add` runs; behavior unchanged, comment now truthful).
 - README — uninstall "what gets removed" list no longer claims ffmpeg (creativity-maxxing installs and removes it; ten lines up the same section already said so).
-- Step 2 (`step-2/ghostty-install.sh`): post-install summary now includes a yellow "ONE MORE STEP — GRANT FULL DISK ACCESS" section with click-by-click instructions (System Settings → Privacy & Security → Full Disk Access → toggle Ghostty ON, with the `+` → `/Applications` fallback if Ghostty isn't listed). New `--open-fda` flag jumps directly to the right pane via the canonical `x-apple.systempreferences:...?Privacy_AllFiles` URL. Closes item 1 of the WAGMI Apr-22 install-call bug catalog (`project_wagmi_install_bugs_2026_04_22.md`) — every WAGMI teammate hit silent FDA-permission errors on first launch.
+- Step 2 (`step-2/ghostty-install.sh`): post-install summary now includes a yellow "ONE MORE STEP — GRANT FULL DISK ACCESS" section with click-by-click instructions (System Settings → Privacy & Security → Full Disk Access → toggle Ghostty ON, with the `+` → `/Applications` fallback if Ghostty isn't listed). New `--open-fda` flag jumps directly to the right pane via the canonical `x-apple.systempreferences:...?Privacy_AllFiles` URL. Closes item 1 of the Apr-22 install-call bug catalog — every tester hit silent FDA-permission errors on first launch.
 - Step 1-5 — anchored MCP grep patterns at `^<name>:` so substring matches don't trigger false-positive "already installed" detection.
 - Step 5 — BSD grep compat fix in Motion detection (macOS `grep` doesn't support `-P` like GNU does; pattern simplified accordingly).
 - Step 6 — `SAVED_TOKEN` env var unset after self-test validation so a stale value doesn't leak into the next step.

landing-ab-skill/SKILL.md

@@ -31,7 +31,7 @@ Every landing page ships able to watch, test, and rebuild itself. No more frozen
      }
    })
    ```
-4. **Light mode default** — never ship `prefers-color-scheme: dark` as default (standing rule `feedback_never_dark_mode`).
+4. **Light mode default** — never ship `prefers-color-scheme: dark` as default.
 5. **Drop `docs/LP-OPS.md`** into the repo (see template below) so the optimization loop survives the session.
 
 Division of labor: `copywriting` owns the words, `high-end-visual-design` / `ui-ux-pro-max` own the look — this skill owns instrumentation + the optimization loop.

osmani-build-skill/SKILL.md

@@ -18,7 +18,7 @@ allowed-tools: Skill, Bash, Read, Grep, Task, Agent
 
 Thin orchestrator. The addy plugin skills do the actual work; this skill decides WHICH of the 24
 fire, in what order, with your house rules overriding addy's defaults. Born 2026-07-02, same day
-the plugin landed (`reference_addy_agent_skills_plugin.md`).
+the plugin landed.
 
 ## When this fires — OFFER, never auto-run
 
@@ -73,9 +73,9 @@ Default momentum is continue; a bare "go" advances. Never re-litigate a complete
   PR-flow steps inside git-workflow-and-versioning.
 - **Never** `Co-Authored-By: claude-flow <ruv@ruv.net>` or any ruv* coauthor on commits.
 - **No proactive docs/READMEs.** documentation-and-adrs runs only on explicit ask; READMEs follow
-  `feedback_readme_style` (personal voice, no dev-jargon jokes).
+  README style: personal voice, no dev-jargon jokes.
 - **ADRs route through /save branch 4** → `Claude-Memory/adr/ADR-<nnn>-<slug>.md`, not addy's location.
-- **Never dark mode by default** on any scaffold (`feedback_never_dark_mode`).
+- **Never dark mode by default** on any scaffold.
 - **Task creation → /maketasks.** Any planning output that becomes tracked tasks goes through the
   skill — never direct 05-Tasks writes, never minted UUIDs.
 - **/recon stays separate** — this skill never runs the landscape sweep itself.
@@ -87,7 +87,7 @@ Default momentum is continue; a bare "go" advances. Never re-litigate a complete
    `ls ~/.claude/plugins/cache/addy-agent-skills/agent-skills/*/skills/<name>/SKILL.md`
    (version dir changes on plugin update — always glob, never hardcode).
 3. Plugin missing entirely? Reinstall with the SSH→HTTPS workaround in
-   `reference_addy_agent_skills_plugin.md`, then continue.
+   the plugin's own docs, then continue.
 
 ## Non-goals
 

recon-skill/SKILL.md

@@ -6,7 +6,7 @@ allowed-tools: Bash, WebSearch, WebFetch, Read, Write, Task, Agent
 
 # recon — look before you build
 
-The rule (memory `feedback_prior_art_check_before_building`): **prior-art sweep BEFORE code, not after.** talk2me is the scar — a whole hands-free voice loop for Claude Code built and shipped before discovering `mbailey/voicemode` (MIT, ~1.2k★) does nearly the same thing and Anthropic ships native `/voice`. The check belongs at turn one.
+The rule: **prior-art sweep BEFORE code, not after.** talk2me is the scar — a whole hands-free voice loop for Claude Code built and shipped before discovering `mbailey/voicemode` (MIT, ~1.2k★) does nearly the same thing and Anthropic ships native `/voice`. The check belongs at turn one.
 
 This skill produces a **ranked landscape + edge analysis + GREEN/YELLOW/RED verdict**. It does NOT build. Building starts only after the discussion.
 

step-2/ghostty-install.sh

@@ -497,7 +497,7 @@ print_summary() {
     # -------------------------------------------------------------------------
     # ONE MORE STEP — Full Disk Access (macOS only)
     # Ghostty silently fails to read most user files until macOS grants it
-    # Full Disk Access. Every WAGMI teammate hit this on their first install.
+    # Full Disk Access. Every tester hit this on their first install.
     # Print exact click-by-click instructions; menu names verified against
     # macOS Sonoma / Sequoia (post-Ventura it's "System Settings", not
     # "System Preferences").