Add ACS patch release workflow

[davdhacs]

Summary

• Adds patch-release/ directory as a thin ACP workflow wrapper
• Loads the patch-release skill from the internal stackrox/skills repo at runtime
• System prompt covers only ACP-specific credential handling (workspace secrets, MCP Jira, token expiry)
• All procedures, decision frameworks, and reference data live in stackrox/skills (PR: https://github.com/stackrox/skills/pull/5)

Files

• patch-release/.ambient/ambient.json — ACP workflow config with slim system prompt
• patch-release/.claude/commands/patch-release.md — Loader that clones skills repo and delegates to SKILL.md
• patch-release/CLAUDE.md — Architecture and testing docs
• CLAUDE.md — Updated to list both workflows

Architecture

ambient-workflows (public)          stackrox/skills (internal)
├── patch-release/                  └── plugins/patch-release/
│   ├── .ambient/ambient.json           ├── skills/patch-release/SKILL.md
│   ├── .claude/commands/               ├── reference/*.md
│   │   └── patch-release.md            └── scripts/acs-operator-test.sh
│   └── CLAUDE.md

The /patch-release command locates or clones the skills repo, then follows the SKILL.md process. Works from both ACP and local Claude Code.

Test plan

• Load in ACP with "Custom Workflow", path patch-release
• Verify /patch-release 4.8.11 clones skills repo and presents status
• Verify credential detection works (MCP Jira in ACP, curl fallback locally)
• Depends on: https://github.com/stackrox/skills/pull/5

🤖 Generated with Claude Code