v1.11.0 — execute-only exception for Claude Code skill scripts

Added

• .py / .sh helper scripts under ~/.claude/skills/ are now execute-only exempt from the strict outside-project execute block in block_shell_script_execution. Skills that ship helper scripts (e.g. reader-knowledge-audit's render-report.py, reader-knowledge-audit-loop-hook's arm.sh) were previously unusable from any project other than the one the skill happened to be developed in, since the exec walker has no allowlist by design (an execute-allowlisted write dir would become an RCE escape hatch). The exception is scoped tightly to ~/.claude/skills/**/*.py and ~/.claude/skills/**/*.sh and covers execute only — the Write/Edit/MultiEdit hooks still block any write to that path, so nothing new can land there through Claude's own tool calls.

See CHANGELOG.md for full detail.