v5.0.0 — review-kit (REVIEW phase)

What's new

New plugin: review-kit — ships the panel-review skill (multi-perspective architect+security review of staged changes), now correctly placed in the REVIEW phase per the PLATFORM.md SDLC ribbon:

IDEATE · PLAN · CODE · BUILD · TEST · REVIEW · RELEASE · OPERATE

Marketplace now publishes 6 plugins (was 5):

Phase	Plugin
(cross-cutting)	secure-baseline
IDEATE	ideate-kit
CODE	code-kit
REVIEW	review-kit ← new
RELEASE	release-kit
OPERATE	operate-kit

Breaking change

Consumers pinning code-kit#v4.0.0 for panel-review must:

1. Bump code-kit to #v5.0.0 (architect persona only now)
2. Add plugins/review-kit#v5.0.0 pin to apm.yml

Run apm cache clean && apm install to regenerate the lockfile.

Validation

• Per-kit apm pack --offline synthesizes plugin.json from apm.yml and remaps .apm/<type>/ → <type>/ in build output (documentation gap filed: microsoft/apm#1161 — body rewritten with evidence)
• Self-audit CI green on main
• Reference consumer install (zava-storefront against v5 branch ref): 5 plugins → 7 primitives integrated (2 agents + 2 skills + 3 instructions)

Migration sub-table (v4.0.0 → v5.0.0)

See CATALOG.md for the full pinning recipe.