docs: sync CLI skills with current framework status

[antosubash]

Summary

Syncs the project's Claude skills and command-skills (.claude/skills/**, .claude/commands/**) with the current framework state on main (including the new Policy / entity-level authorization feature from #257). Audited every project-status-dependent claim against the source and corrected the drift.

Key updates

• public const string Route convention (now on every endpoint, enforced by SM0054) added to all endpoint examples in simplemodule, minimal-api, and their references.
• FormRequest<TSelf> form-binding pattern documented ([FormRequest] sealed partial : FormRequest<TSelf>, Prepare() + ConfigureRules, bound directly as a handler param; SM0056/SM0057) — previously only raw [FromForm] was shown.
• Policy / instance-level authorization added (IPolicy<TResource>, IAuthorizer, PolicyActions, AuthorizationResult, SM0058–SM0061) across the simplemodule skill, endpoints.md, cross-module.md, and minimal-api.
• Diagnostics expanded to the real SM0001–SM0061 range.
• debug-module.md: replaced a fabricated diagnostic table (SM0020/SM0030 don't exist; several meanings were wrong) and fixed the wrong implementation SDK (Microsoft.NET.Sdk → Microsoft.NET.Sdk.StaticWebAssets) and stale ../Views/ import path.
• review-module.md: rewrote the Events area for Wolverine auto-discovery (the old IEventHandler<>/AddScoped pattern does not exist), added Route/FormRequest/Policy checks, fixed Views/ → Pages/.
• Misc: AddModuleDbContext optional params (configureOptions, enableSpatial); __dirname → import.meta.dirname; ci.md now lists all npm run check steps; verify-feature example route Products/Browse → real AuditLogs/Browse.

Verification

• Code review (/code-review high): 1 finding (incorrect HTTP status in a CrudEndpoints.Restore/ForceDelete comment) found and fixed; consistency/cross-reference pass clean.
• Adversarial source check: all 20 cited SM00xx codes exist in the generator; every new API/identifier/signature confirmed against framework + module source; YAML frontmatter valid; code fences balanced.
• Local code-CI intentionally not run: the change is 100% .claude/*.md — markdown that is outside biome's scope and is not compiled, bundled, or tested. GitHub Actions runs CI on this PR as the authoritative gate.

Test plan

• CI green on PR
• Reviewer spot-checks the Policy + FormRequest sections against the framework