🐛 fix: fail fast on invalid roles and target config

[zrr1999]

Summary

• fail fast when source, project, or user role files are malformed instead of silently skipping them during add, list, or render
• honor explicit target config for model-less adapters like Cursor and Windsurf while rejecting unsafe project-external output directories
• isolate cached GitHub sources by ref and harden loader parsing around frontmatter fences and missing prompt_file references
• consolidate duplicated Cursor/Windsurf adapter tests into shared parametrized coverage while tightening regression assertions

Why

• silent partial success made broken role definitions easy to miss and left renders in a misleading state
• CLI target resolution incorrectly assumed every adapter required model_map, which broke valid Cursor/Windsurf configs
• unchecked output paths and ref-colliding caches weakened safety and reproducibility
• the adapter test suite had copy-pasted coverage that was harder to maintain than a shared regression matrix

Testing

• just ci

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
role-forge	Ready	Preview, Comment	Mar 16, 2026 0:15am

[codspeed-hq]

Merging this PR will not alter performance

✅ 1 untouched benchmark

---

_{Comparing fix/strict-role-loading-target-config (e041475) with main (0ad5193)}