[codex] Add cost-aware agent skill standards

[hudsonaikins]

Summary

• Adds the ProfitCtl Cost-Aware Codex skill with bundled AI SaaS scenario templates and helper runner.
• Adds cost-source provenance fields, validation, schema docs, provider catalog seed data, and a standards judge.
• Moves PR/main AppSec scanning into GitHub Actions while keeping Woodpecker focused on tag release publishing.

Validation

• git diff --check
• YAML parse for .github/workflows/ci.yml and .woodpecker.yml
• go mod tidy with no go.mod / go.sum diff
• go vet ./...
• go test ./...
• quick_validate.py for local and repo skill copies
• go run scripts/judge_cost_standards.go
• python3 /Users/hudson/.codex/skills/profitctl-cost-aware/scripts/run_profitctl_scenarios.py --compare

Notes

• Full Woodpecker release E2E still requires a semver tag and release secrets.
• Template prices are planning assumptions; the judge warns until telemetry or invoice-backed values are added.