v0.10.0 — ai-engineer preset + green CI

v0.10.0 — ai-engineer preset + green CI

For building production chatbots and AI agents on AWS. Based on data-ai:
20 agents, 35 skills, 70 commands, 7 native hooks, 4 workflows.

• Skills: bedrock-agentcore (Runtime deployment, Harness vs Runtime vs
  Lambda, Memory tiers, the 0.0.0.0:8000/mcp streamable-HTTP contract),
  agentcore-gateway-mcp (Lambda/OpenAPI/Smithy to MCP tools, the four
  outbound auth modes, the IAM SigV4 compatibility matrix, semantic tool
  discovery, the DYNAMIC-mode gotcha), mcp-server-hosting (remote MCP on
  Lambda/Fargate/Runtime, OAuth via Cognito/Okta/Auth0, the RFC 7235 401 +
  WWW-Authenticate handshake), strands-agents, bedrock-rag,
  agent-evaluation.
• Steering: aws-native-agents, mcp-architecture,
  agent-design-patterns, agent-evaluation, responsible-ai.
• Native hooks: Prompt Change Eval, Tool Contract Check, Agent Card Update.
• 4 example specs: AgentCore Support Chatbot, MCP Server on Lambda,
  RAG Knowledge Assistant, Multi-Agent Orchestrator.
• Powers: AWS IaC + Terraform (essential), Context7/Exa/Hugging Face
  (recommended), Langfuse/LangSmith/Datadog/Pinecone/Snyk (optional).

AWS claims are grounded in an adversarially verified research pass. Compute
pricing and blanket component-GA claims are deliberately excluded in favour
of links to the live AWS release-notes and pricing pages.

CI had never been green: 40 consecutive failed runs going back to 18 May.

• pnpm/action-setup aborted on a duplicate version declaration, so every run
  died at setup before reaching install.
• packages/cli had no vitest.config.ts, so pnpm run test matched no files
  and exited 1.
• lint invoked eslint, which was neither installed nor configured. Added
  eslint 9 + typescript-eslint with a flat config.
• Real bug: ThemedPrompt gated all four prompts on
  process.stdin.readable instead of the injected capability.isTTY,
  contradicting its own interface docs. stdin.readable is true for a pipe, so
  non-interactive runs (CI, pipes, tests) blocked forever waiting on input.
• The p11 emoji/PII checks sampled 100 of ~450 files at random, so real
  violations surfaced only intermittently and read as flake; both now iterate
  every file. Exemption matching also compared forward-slash patterns against
  path.relative() output, silently missing on Windows only.
• Removed a decorative emoji prefix from the deep-security-scan command
  description in four presets; it violated the repo's own no-emoji test and
  slipped in while CI was red.
• Removed dead code surfaced by the first working lint run.
• Corrected stale "6 presets" counts in README and docs (now 9).

Verified: lint, typecheck, test (586 passing), build and structural all green
across 9 CI jobs (ubuntu/macos/windows on Node 18/20/22).