v1.10.0 — disable-model-invocation dual-role + reverse-audit lesson

The disable-model-invocation flag is ALSO the correct config for a user slash-command (it stops the model auto-firing /changelog, /lfg, /setup… while keeping /name), not just a trap-hide. So a reverse audit using a name-invoked → restore lens is a false-positive machine: a full body-read audit of all 487 hidden skills flagged 17 'wrongly hidden', but on a deterministic argument-hint/allowed-tools check ~16 were correctly-configured commands. Restoring a command would let the model auto-fire it and re-bloat the catalog. Genuine restores ≈ 1. A conservative re-rated forward extension also confirmed 0 new safe traps — post-budget the hide-sweep is largely played out. Added classification-rigor rules.