Fix Clawpatch findings and harden provider flows

[faustodavid]

Summary

• fix all Clawpatch findings and revalidate to zero open findings
• harden provider auth/cache/local-checkout behavior across GitHub, GitLab, Azure DevOps, and YouTrack
• add CI formatting enforcement, deterministic tool pins, and stronger skill auth troubleshooting validation
• update Homebrew formula and package version to v0.1.1

Homebrew

• Formula/smith.rb now targets v0.1.1
• pushed annotated tag v0.1.1 pointing at source revision 0a4bc1eadf0d0a20fb4af3ed20c3974d33fcc63d

Validation

• clawpatch --root /Users/fluxfire/Repos/smith --no-input status --json -> openFindings: 0
• uv run --frozen --extra dev ruff format --check .
• uv run --frozen --extra dev ruff check .
• uv run --frozen --extra dev mypy src
• uv run --frozen --extra dev python scripts/validate_skill_quality.py --mode all
• uv run --frozen --extra dev pytest -> 717 passed, 6 skipped
• ruby -c Formula/smith.rb
• uv lock --check
• git diff --check

Note: local brew audit --strict --formula Formula/smith.rb could not run because this Homebrew setup disables path-based audit outside Tier 1 configs.