Fix skill catalog drift in CI, router, and eval coverage

[NoumaanAhamed]

Title:

Summary

• .github/workflows/ci.yml now loops over every skills/*/ directory for skills-ref validate instead of a hardcoded 10-skill list — 8 skills (blueprint, wp-abilities-audit, wp-abilities-verify, wp-patterns, wp-phpstan, wp-plugin-directory-guidelines, wp-rest-api, wpds) were shipping with zero CI schema validation
• skills/wordpress-router/references/decision-tree.md gains routes for wpds, wp-abilities-audit, wp-abilities-verify, wp-patterns, and wp-plugin-directory-guidelines — previously dead ends with no route
• Security-intent routing now points to wp-plugin-development (which already covers nonces/capabilities/sanitization) instead of the nonexistent wp-security
• Added eval/scenarios/wpds-build-component-with-tokens.json — wpds had zero eval coverage

Test plan

• node eval/harness/run.mjs passes
• New CI loop enumerates all 18 skill directories (verified locally via comm diff against ls skills)
• eval/scenarios/wpds-build-component-with-tokens.json validated as well-formed JSON matching the scenario schema

Closes #97

[github-actions]

The following accounts have interacted with this PR and/or linked issues. I will continue to update these lists as activity occurs. You can also manually ask me to refresh this list by adding the props-bot label.

If you're merging code through a pull request on GitHub, copy and paste the following into the bottom of the merge commit message.

Co-authored-by: NoumaanAhamed <mohamedahamed@git.wordpress.org>

To understand the WordPress project's expectations around crediting contributors, please review the Contributor Attribution page in the Core Handbook.