fix(skills): align repository guidance with implementation (#1315)

* docs(skills): design implementation synchronization

* docs(skills): plan implementation synchronization

* fix(release): filter internal notes from public body

* docs(release): synchronize release workflow guidance

* fix(stalker): normalize catalog series flags

* fix(stalker): preserve progress with scoped episode IDs

* fix(playback): expose strict position persistence

* docs(stalker): record series position compatibility

* test(skills): validate repository skill contracts

* fix(database): keep SQL trace values private

* docs(skills): refresh Nx and SQLite ownership

* docs(skills): align provider and UI guidance

* docs(skills): tighten validated guidance

* docs(release): require exact release pushes

* style(electron): remove trailing blank line

* fix(ci): classify repository skills coverage

.github/workflows/build-and-make.yaml

@@ -1450,15 +1450,12 @@ jobs:
                   if [ "${IS_TAG_BUILD}" = "true" ]; then
                       NAME="Release v${VERSION}"
                       TAG="${GITHUB_REF_NAME}"
-                      # Authored release notes: the release flow writes this
-                      # CHANGELOG section from .changes/*.md before tagging
-                      # (see .changes/README.md), so at tag time the changelog
-                      # is the authored source of truth. The extractor exits
-                      # non-zero when the section is missing, failing the
-                      # release rather than silently shipping PR-title-only
-                      # notes. generate_release_notes stays on below, so the
-                      # GitHub commit list still renders under this body.
-                      BODY="$(node tools/release/extract-changelog-section.mjs "${VERSION}")"
+                      # The full committed CHANGELOG retains internal notes,
+                      # while the tag release uses authored public extraction.
+                      # An internal-only release intentionally has no authored
+                      # public text. GitHub's generated commit list remains
+                      # separate below.
+                      BODY="$(node tools/release/extract-changelog-section.mjs --public "${VERSION}")"
                   elif [ "${EVENT_NAME}" = "pull_request" ]; then
                       NAME="v${VERSION} — PR #${PR_NUMBER} @ ${SHORT_SHA} [test]"
                       TAG="test-pr-${PR_NUMBER}"