Test-materialized fixture workflows ship if a skill is installed from a used checkout

ci-score and ci-secure both materialize attack-shaped workflow fixtures at gitignored .github/ paths inside the skill directory when their test suites run. A fresh npx skills add clone is clean, and the registry scans only the tracked (cloaked) tree — but an install performed from a checkout whose tests have run would copy the materialized files into the user's install, since the skills CLI copies recursively with no ignore handling. Follow-up options: materialize under $TMPDIR instead of in-tree, or have conftest clean up after the session. Applies to both skills equally (ci-secure matched ci-score's precedent at launch review).