[patch] agent-hooks v0.11.1: Default-enable APR and apply cross-harne…

…ss logic (#71)

## agent-hooks v0.11.1

Vendored from `jfrog-agent-hooks/v0.11.1` of

[JFROG/jfrog-agent-hooks](https://github.jfrog.info/JFROG/jfrog-agent-hooks)
(GHES).

Follow-up to the v0.11.0 drop ([claude-plugin
#62](jfrog/claude-plugin#62)): same product
changes, with APR onboarding moved from rule files to a session-start
nudge.

### What changed

- JFSK-40 - Replace APR onboarding rule files with session-injected
nudge
- MLD-1386 - Apply cross harnesses logic
- JFSK-40 - Default-enable APR with bounded Consent Enable discovery
- JFSK-1 - Keep [patch] on plugin sync PR titles
- JFSK-1 - Fix plugin sync issues and restore workspace governed union
- JFSK-1 - Fix hooks version resolution for vendored plugins

### Source

- Tag:
https://github.jfrog.info/JFROG/jfrog-agent-hooks/releases/tag/jfrog-agent-hooks/v0.11.1
- Sync Plugins run:
https://github.jfrog.info/JFROG/jfrog-agent-hooks/actions/runs/1399306
- Sync branch: `chore/sync-modules-v0.11.1`

---------

Co-authored-by: jfrog-skills-release-bot[bot] <276080306+jfrog-skills-release-bot[bot]@users.noreply.github.com>
Co-authored-by: Roee Sanker <roees@jfrog.com>
Co-authored-by: Cursor <cursoragent@cursor.com>

[patch] chore: sync skills to v0.29.0 (#70)

Vendored from `v0.29.0` of jfrog/jfrog-skills.

Co-authored-by: jfrog-agentic-release-bot[bot] <276080306+jfrog-agentic-release-bot[bot]@users.noreply.github.com>

[patch] chore: sync skills to v0.28.0 (#67)

[patch] chore: sync skills to v0.28.0 (#67)

skills v0.25.0: jfrog-init, INDEX/core, UA identity, Devin --server (#65

)

## skills v0.25.0

Vendored from `v0.25.0` of
[jfrog/jfrog-skills](https://github.com/jfrog/jfrog-skills)
(source tag `jfrog-skills/v0.25.0` on GHES).

**Last merged skills pin on this repo is v0.22.0** (cursor #58 / claude
#53 / vscode #47). Nothing after that made `main`. This PR is the first
plugin drop of v0.23.0–v0.25.0 — it is not a restore of something
already live.

### What this PR adds vs v0.22.0

- **jfrog-init** — plugin readiness / setup skill, including Claude
marketplace registration
- **Base `jfrog` skill** — always-read core, on-demand `INDEX.md`,
front-loaded invariants, MUST tiers / refs under 50k
- **User-Agent identity** — Client → Agent → Model on the skill UA
(`trigger=` / `tool=` / `client=` / `model=`)
- **Devin** — Agent Guard authenticates via `jf --server` (not env-var
credentials)
- **SKILL.md** — do not invent `JFROG_CLI_USER_AGENT`
- **`check-environment.sh`** — Claude/Cursor product envs (`CLAUDECODE`,
`CURSOR_TRACE_ID`, …) still set `tool=` for mcp-management Step A, and
`tool=` is always printed when known

mcp-management harness files stay on the v0.22.0 Claude/Cursor routing
table. Agent Guard install/list/remove commands are unchanged.

### Source

- GHE:
https://github.jfrog.info/JFROG/jfrog-skills/releases/tag/jfrog-skills/v0.25.0
- Public: https://github.com/jfrog/jfrog-skills/releases/tag/v0.25.0
- Compare vs last plugin pin:
https://github.jfrog.info/JFROG/jfrog-skills/compare/jfrog-skills/v0.22.0...jfrog-skills/v0.25.0
- Sync branch: `chore/sync-skills-v0.25.0`
- Release run:
https://github.jfrog.info/JFROG/jfrog-skills/actions/runs/1352265

Co-authored-by: jfrog-agentic-release-bot[bot] <276080306+jfrog-agentic-release-bot[bot]@users.noreply.github.com>

chore: sync skills to v0.22.0 (#58)

Vendored from `v0.22.0` of jfrog/jfrog-skills.

Co-authored-by: jfrog-agentic-release-bot[bot] <276080306+jfrog-agentic-release-bot[bot]@users.noreply.github.com>

v0.5.12

Backfilled from the manifest bump in 4156a66 (chore: sync skills to v0.21.0 (#51)).

v0.5.11

Backfilled from the manifest bump in 1ebdcf0 (chore: sync modules to v0.8.1 (#50)).

v0.5.10

Backfilled from the manifest bump in d877564 (chore: sync skills to v0.20.0 (#48)).

v0.5.9

Backfilled from the manifest bump in 6588bfb (chore: sync modules to v0.7.0 (#47)).

v0.5.8

Backfilled from the manifest bump in 009a0d8 (chore: sync modules to v0.6.0 (#46)).