feat: publish Sandwich Hime tooling preview

Publish the exact sanitized Agent Skill and VS Code preview source tree with independent license boundaries, deterministic provenance manifests, and no private development history. Material design and implementation assistance was provided by OpenAI Codex.

Signed-off-by: Cole Speelman <crspeelman@gmail.com>

scripts/verify.ps1

@@ -0,0 +1,21 @@
+# SPDX-License-Identifier: AGPL-3.0-only
+$ErrorActionPreference = "Stop"
+$Root = (Resolve-Path (Join-Path $PSScriptRoot "..")).Path
+Set-Location $Root
+node scripts/validate-skill.js
+if ($LASTEXITCODE -ne 0) { throw "skill validation failed" }
+go run ./scripts/package-skill.go
+if ($LASTEXITCODE -ne 0) { throw "skill packaging failed" }
+Push-Location editors/vscode
+try {
+    npm run verify
+    if ($LASTEXITCODE -ne 0) { throw "VS Code verification failed" }
+    $FirstSBOM = (& node scripts/sbom.js) -join "`n"
+    if ($LASTEXITCODE -ne 0) { throw "SBOM generation failed" }
+    $SecondSBOM = (& node scripts/sbom.js) -join "`n"
+    if ($LASTEXITCODE -ne 0) { throw "SBOM generation failed" }
+    if ($FirstSBOM -cne $SecondSBOM) { throw "SBOM output is not deterministic" }
+}
+finally { Pop-Location }
+git diff --check
+if ($LASTEXITCODE -ne 0) { throw "git diff check failed" }