1.6.0 — skills-format migration, lint retired-path fix, plugin.json completeness

Skills migration: each of the eight slash commands gains a skills/<name>/SKILL.md
twin (same invocation name, byte-identical body). Per-skill allowed-tools
pre-authorize the resolved python3/python/py -3 invocations + the CoWork ls
fallback probe; disable-model-invocation: true makes /echo-sweep and /echo-triage
operator-only. Docs-confirmed: a same-name skill takes precedence over the legacy
command, so commands/ coexists until its scheduled 2.0 deletion. The $ECHO
path-resolution dedupe is resolved as not-supported (skill dirs are
self-contained; no cross-skill snippet sharing).

Lint fix: vault_lint.py checks retired patterns BEFORE routes, so a seed README
inside a retired tree (archive/...) flags retired-path instead of being absolved
by the permissive leaf-readme route. New end-to-end regression test seeds
archive/notes/README.md (fails pre-fix, passes now).

plugin.json: version 1.6.0, homepage + repository -> git.alwisp.com/jason/echo.

All suites green: 25/25 client unit tests (incl. routing-sync guard), feature,
reflect, offline-queue, PATCH-semantics. Artifact rebuilt (87 entries, both
formats); pointer refreshed.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

echo-memory.plugin.src/skills/echo-reflect/SKILL.md

@@ -0,0 +1,33 @@
+---
+name: echo-reflect
+description: Reflect on this session — extract durable memories and propose them for one-tap capture
+argument-hint: "[optional focus, e.g. 'just decisions']"
+allowed-tools: Bash(python3 *echo.py*), Bash(python *echo.py*), Bash(py -3 *echo.py*), Bash(ls /sessions/*)
+---
+
+Use the **echo-memory** skill to run **session reflection** (H5). Scan this conversation for
+things worth remembering across sessions, then propose them — don't write blindly.
+
+1. **Extract** durable items from the conversation: new facts, preferences, decisions,
+   commitments, people/companies/projects introduced, and anything the operator said to remember.
+   Skip the ephemeral. Anchor relative dates on the conversation's `currentDate`.
+2. **Emit a JSON array** of proposals (one per item), each:
+   `{"title","kind","body","aliases","tags","sources","confidence"}` — `kind` ∈
+   `person, company, concept, reference, meeting, project, area, semantic, episodic,
+   working, skill, decision`; set `"inbox": true` when the home is genuinely unknown;
+   `confidence` 0–1 (items below 0.6 are dropped — send those to the inbox instead).
+   Write the array to a file with the Write tool (cross-platform; no heredoc).
+3. **Preview, then apply.** Dry-run first (writes nothing) and show the operator the plan; only
+   apply after they confirm.
+
+```bash
+ECHO="${CLAUDE_PLUGIN_ROOT}/skills/echo-memory/scripts/echo.py"   # python3 (Windows: python / py -3)
+[ -f "$ECHO" ] || ECHO=$(ls /sessions/*/mnt/.remote-plugins/*/skills/echo-memory/scripts/echo.py 2>/dev/null | head -1)   # CoWork sandbox fallback
+python3 "$ECHO" reflect proposals.json            # dry-run: validate + classify + preview
+python3 "$ECHO" reflect proposals.json --apply    # write — routes each via capture (indexed, linked, logged)
+```
+
+`reflect` dedups every proposal against the entity index (so it shows create-vs-update),
+skips below-confidence items, and routes `inbox` proposals to the capture inbox. Each
+applied item goes through the normal `capture` path — canonical frontmatter, auto-linking,
+and the recall index — and the writes are lock-guarded. $ARGUMENTS