feat(profile): partition skills/plugins/MCPs/CLIs by usage profile

Ship lib/profile.sh + 9 profiles in lib/profiles/. A profile is a
plain-text file listing items + types (gstack | personal | external |
plugin@<marketplace> | mcp | cli). `profile set <name>` enables the
listed items and disables the rest:

  - gstack/personal/external skills: symlink toggle skills/ ↔
    skills-disabled/ (gstack__<name> prefix to avoid collisions; no
    prefix for personal/external).
  - plugins typed `plugin@<marketplace>`: actually toggled via
    `claude plugin enable|disable <name>@<marketplace>`. Allowlist:
    MANAGED_PLUGINS = ui-ux-pro-max, plugin-dev, pr-review-toolkit.
    Denylist: PROTECTED_PLUGINS = caveman, security-guidance,
    superpowers (always-on, never disabled even if absent from a
    profile).
  - mcp magic: delegated to lib/toggle-external.sh which already
    handles the MAGIC_API_KEY env lookup. Other MCPs stay advisory.
  - cli (rtk, gsd, ctx7, graphify): status-only, never auto-installed.

Profiles shipped:
  web        public website work — frontend + content + light dev
  seo        SEO + GEO + W3C audit (search/AI indexability + a11y)
  web-full   production website end-to-end (web ∪ seo ∪ qa-only/canary)
  backend    backend / API / system dev — no design, no SEO
  design     visual QA, design systems, mockups, polish
  dev        daily code work — features, fixes, refactor, ship
  qa         site testing, perf, canary, validation
  audit      comprehensive audit — security + SEO + perf + health
  minimal    strip all gstack skills (quiet session)

Commands:
  profile list / show <name> / current / apply <name> / set <name> /
  reset / diff <a> <b>

`current` heuristic returns "full" when nothing is disabled, otherwise
picks the profile with the highest available-ratio (counts both
"enabled" and "installed" — the latter for CLIs). Tiebreaker: larger
profile total wins, so web-full beats web at a 100% tie.

`reset` re-enables every gstack skill but does NOT touch plugins —
the user re-enables a managed plugin manually or via `apply <profile>`.
This is documented in the trailing info line.

Integration:
  - skills/profile/SKILL.md — `/profile` slash command, lists profiles,
    documents the per-type mechanism, points at lib/profile.sh.
  - agents/plugin-advisor.md — DETECT phase calls `profile current`,
    OUTPUT adds a PROFILE line, and TOGGLING EXTERNAL TOOLS gains a
    "Skill profiles" section with a signal → profile recommendation
    table.
  - lib/toggle-external.sh — header pointer to profile.sh for fine-
    grained activation (toggle-external still owns whole-gstack and
    magic-MCP toggles).
  - Makefile — `make profile cmd="set <name>"`, profile-list,
    profile-current, profile-reset.

Tested end-to-end: `set web` enables ui-ux-pro-max + magic; `set seo`
disables ui-ux-pro-max; `set minimal` disables ui-ux-pro-max but
spares always-on plugins; `reset` restores all 64 skills; shellcheck
clean.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

lib/profiles/web-full.profile

@@ -0,0 +1,53 @@
+# DESC: Production website — design + dev + SEO + GEO + W3C + perf
+# Activate when: shipping a public website end-to-end. Combines `web`
+# and `seo` profiles into a single set so the same session can build,
+# polish, audit, and verify.
+
+# === Design ===========================================================
+design-shotgun
+design-review
+design-consultation
+design-html
+plan-design-review
+
+# === Browser + dogfooding =============================================
+browse
+open-gstack-browser
+setup-browser-cookies
+
+# === Plan-mode reviews ================================================
+plan-ceo-review
+plan-eng-review
+
+# === Code work ========================================================
+feat                              personal
+ship-feature                      personal
+hotfix                            personal
+bugfix                            personal
+ship
+review
+checkpoint
+commit-change                     personal
+refactor                          personal
+
+# === SEO / GEO / standards ===========================================
+seo                               personal
+geo                               personal
+validate                          personal
+harden                            personal
+analyze                           personal
+
+# === Perf + canary ===================================================
+health
+benchmark
+canary
+qa-only
+
+# === External + plugin + MCP =========================================
+emil-design-eng                   external
+ui-ux-pro-max                     plugin@ui-ux-pro-max-skill
+magic                             mcp
+
+# === CLIs (advisory) =================================================
+ctx7                              cli
+graphify                          cli