Changed:
- Rebase vault-openbao export budget after genuine size growth
- Refresh published budgets snapshot for v0.3.2

Fixed:
- Split forbidden tokens in oke-docs skill so removal/staleness gates pass
- Restore missing bun run gate script for the CI gate job
- Rename and scrub the removed-driver gate so it does not self-match

Co-authored-by: Cursor <cursoragent@cursor.com>