feat(profiles): prune the gstack catalog, add max, honor a removed denylist

Nine gstack skills leave every profile (ship is trunk-based on Gitea,
land-and-deploy auto-merges and deploys, setup-deploy, autoplan reads
paths that do not exist here, context-save has no restore, learn is an
unused parallel store, careful and guard hooks never fired, design-shotgun
needs an absent OpenAI key). lib/gstack-removed.sh is the single denylist;
profile.sh gstack on and toggle-external.sh enable gstack skip it.

full now carries everything every other profile carries (user rule), minus
the parked make-pdf, diagram and 21st-ai/ui-explore/ui-review, which live
in the new max profile together with pr-review-toolkit. The 21st trio also
leaves web, web-full and design (redundant with impeccable + ui-ux-pro-max).

lib/tests/profile-census.test.sh asserts the invariants live and on a
baseline fixture plus one mutant per invariant; gstack-removed.test.sh
covers both restore paths.

lib/profiles/max.profile

@@ -0,0 +1,102 @@
+# DESC: Everything — full + the parked generation/review tools + PR review
+# SUPERSET-OF: full
+# Activate when: you need make-pdf, diagram, the 21st-ai/ui-explore/
+# ui-review generation trio, or pr-review-toolkit, on top of everything
+# full carries. Never a broken or doctrine-breaking gstack skill
+# (lib/gstack-removed.sh) — max is full's superset, not the raw catalog.
+
+# === Brainstorm + plan-mode reviews ==================================
+office-hours
+plan-ceo-review
+plan-eng-review
+plan-design-review
+plan-devex-review
+spec
+
+# === Design pipeline =================================================
+design-review
+design-consultation
+design-html
+
+# === Browser + dogfooding ============================================
+browse
+open-gstack-browser
+setup-browser-cookies
+scrape
+skillify
+
+# === Code work — implementation ======================================
+feat                              personal
+ship-feature                      personal
+hotfix                            personal
+bugfix                            personal
+investigate
+refactor                          personal
+code-clean                        personal
+commit-change                     personal
+
+# === Review ===========================================================
+review
+
+# === Second opinion ==================================================
+codex
+
+# === SEO / GEO / standards / security ================================
+seo                               personal
+geo                               personal
+web-validate                      personal
+harden                            personal
+analyze                           personal
+cso
+
+# === Perf + canary + QA ==============================================
+health
+benchmark
+canary
+qa
+qa-only
+
+# === Docs + translation ==============================================
+doc                               personal
+document-release
+diagram
+make-pdf
+pdf-translate                     personal
+
+# === Session hygiene + memory ========================================
+close                             personal
+prune-memory                      personal
+status                            personal
+retro
+freeze
+unfreeze
+
+# === External + plugin + MCP =========================================
+emil-design-eng                   external
+frontend-design                   external
+design-motion-principles          external
+impeccable                        external
+observability-and-instrumentation  external
+deprecation-and-migration          external
+ci-cd-and-automation               external
+scroll-world-storytelling          external
+build-threejs-scroll-worlds        external
+scroll-scrubbed-visual-sequence    external
+scroll-scrubbed-word-reveal        external
+scroll-progress-timeline           external
+ui-ux-pro-max                     plugin@ui-ux-pro-max-skill
+pr-review-toolkit                 plugin@claude-code-plugins
+21st-ui-build                     external
+21st-ui-explore                   external
+21st-ui-review                    external
+21st-cli-use                      external
+21st-ai                           external
+
+# Personal: motion implementation companion (skills/site-motion)
+site-motion                       personal
+
+# === CLIs (advisory) =================================================
+21st                              cli
+ctx7                              cli
+graphify                          cli
+gsd                               cli