v3.0.4

Platform-compliance patch (fixes and hardening only — no roster, Tier, or workflow changes).

A fresh 5-round audit checked every plugin component — the 23 agent files, 7 skills, the hooks, the 3 slash commands, and the manifests — strictly against Anthropic's own published Claude Code documentation, verified with the real claude plugin validate --strict tool and by reproducing each issue before fixing it.

Highlights:

• Closed a total publish-gate bypass via the Monitor tool. The safety hooks matched only Bash and PowerShell; the built-in Monitor tool also runs shell commands, so a push could slip past both the secret scan and the publish gate. Matcher is now Bash|PowerShell|Monitor, with an integrity check and regression test.
• Fixed three agents that silently loaded with no metadata — an unquoted colon in their description broke the YAML, so they ran with no name, tools, or model pin.
• Hook block-reasons now actually reach Claude (were being discarded on the wrong exit code).
• Added missing tool grants so agents can use the skills they rely on, and so the project lead can delegate at all.
• Repaired a licence path that broke on install (now a proper within-plugin symlink).

hooks.test.mjs grew from 61 to 63 tests. See CHANGELOG.md for the full list.