fix(deslop-shared-libs): probe the audited repository with -C <repo>

A CI run probed safe-git from the session directory above the target repo, so
the capability probe never touched the repository and the run fell back to the
API without a local attempt. The probe (and any call from elsewhere) now names
the audited repository.

deslop-shared-libs/SKILL.md

@@ -72,7 +72,7 @@ changed after writing one.
    protections and refuses reads that could run filters, drivers, hooks or
    transports, naming the allowed forms. Never bypass a refusal with raw `git`.
    `diff` takes exactly two explicit committed object IDs, then `--` and paths.
-   First probe with `~/.claude/skills/gstack/bin/gstack-safe-git rev-parse --is-inside-work-tree`; a Git
+   First probe the audited repository with `~/.claude/skills/gstack/bin/gstack-safe-git -C <repo> rev-parse --is-inside-work-tree` (use `-C <repo>` on every call when your shell is elsewhere); a Git
    version check alone is insufficient. If the probe fails (for example
    `unknown option: --no-lazy-fetch`), use pinned-commit GET API source
    and history reads or disclose unavailable local-history coverage. Never retry

deslop-shared-libs/SKILL.md.tmpl

@@ -66,7 +66,7 @@ changed after writing one.
    protections and refuses reads that could run filters, drivers, hooks or
    transports, naming the allowed forms. Never bypass a refusal with raw `git`.
    `diff` takes exactly two explicit committed object IDs, then `--` and paths.
-   First probe with `{{SAFE_GIT}} rev-parse --is-inside-work-tree`; a Git
+   First probe the audited repository with `{{SAFE_GIT}} -C <repo> rev-parse --is-inside-work-tree` (use `-C <repo>` on every call when your shell is elsewhere); a Git
    version check alone is insufficient. If the probe fails (for example
    `unknown option: --no-lazy-fetch`), use pinned-commit GET API source
    and history reads or disclose unavailable local-history coverage. Never retry