fix(factorydroid): follow four documented Droid surfaces

[dyoshikawa]

Summary

Resolves the four Factory Droid divergences in #2500. All four were re-verified against the live docs before implementing.

1. disabledSkills permission key

The settings docs list disabledSkills ("Disable discovered skills without deleting their files.", an array of skill names) alongside the already-supported hooksDisabled. It is now in FACTORYDROID_OVERRIDE_KEYS, so it can be authored in the factorydroid override and is lifted back into it on import.

2. Skills frontmatter: enabled and allowed-tools

The skills docs table documents 11 fields; rulesync modeled 4. enabled (default true, "Set to false to keep the skill on disk but disable it") and allowed-tools ("Declares the tools the skill is designed to use") are now in FactorydroidSkillFrontmatterSchema and in the factorydroid section of the rulesync skill schema, threaded through both conversion directions — looseObject alone was not enough, since both directions build explicit literals.

3. Hooks commandRegex

Droid documents commandRegex as an "Additional regex filter for Execute commands" sitting next to matcher on the group: {"matcher": "Execute", "commandRegex": "^git ", "hooks": [...]}. Added to HookDefinitionSchema and declared as a groupPassthroughFields entry for Droid. That mechanism previously carried plain objects only (AugmentCode metadata), so it was generalized to carry scalars too; the existing disagreement warning and the object path are unchanged.

4. Commands: drop allowed-tools

The custom-slash-commands docs list only description and argument-hint, and state verbatim: "Tool scoping is not available for custom commands. Use Skills or Custom Droids for tool policy." allowed-tools is dropped on generate rather than written as frontmatter Droid ignores, matching the #2453 precedent of not emitting inert configuration. The stale schema comment and the commands row in the research reference map are corrected.

Test plan

• New unit tests for each gap: disabledSkills round-trip, skills enabled/allowed-tools in both directions, commandRegex emitted on the group (and not duplicated onto the hook) plus imported onto every hook in the group, and the commands drop.
• npx vitest run --config vitest.e2e.config.ts src/e2e/e2e-hooks.spec.ts src/e2e/e2e-skills.spec.ts src/e2e/e2e-permissions.spec.ts src/e2e/e2e-commands.spec.ts — 377 passed.
• pnpm cicheck (full) passes; pnpm run generate:schema and pnpm run generate:docs-content regenerated.

Closes #2500

🤖 Generated with Claude Code