docs(fix): mark fix/40 done — bump-skill reclassified internal

Author: gtrabanco

docs/fix/40-bump-skill-internal-only/SPEC.md

@@ -165,20 +165,20 @@ ticks tasks here.
 
 ### P2 — Hardening & PR
 
-- [ ] Run `bump-skill` on `bump-skill` (recommended **minor** bump —
+- [x] Run `bump-skill` on `bump-skill` (recommended **minor** bump —
       metadata reclassification, zero behavior change; if `bump-skill`'s own
       diff analysis judges the removal of the `/bump-skill` menu surface a
       contract change, **major** is acceptable — the executor decides). Ensure
       it adds the changelog rows AND **moves** `bump-skill`'s per-skill table to
       the **Internal (`user-invocable: false`)** subsection in both
       `CHANGELOG.md` and `CHANGELOG.es.md` (an existing table is not auto-moved —
       move it by hand if the tool leaves it under "User-facing").
-- [ ] Re-run the project's full verification gate (commands + exit codes pasted):
+- [x] Re-run the project's full verification gate (commands + exit codes pasted):
       `python3 -c "import json;d=json.load(open('.claude-plugin/plugin.json'));assert './skills/bump-skill' not in d['skills'] and len(d['skills'])==27"`
       (exit 0); `npx skills add . --list` (discovers 28); the Acceptance
       grep checks (all pass).
-- [ ] Pending-docs check: `git status --porcelain -- docs/` → empty
-- [ ] Set the fix-index row status to `done` and commit the flip
+- [x] Pending-docs check: `git status --porcelain -- docs/` → empty
+- [x] Set the fix-index row status to `done` and commit the flip
 - [ ] `git push`
 - [ ] Open the PR (`gh pr create --body-file <path>` — body written as a
       Markdown file, real backticks, never inline `--body`/heredoc) and
@@ -333,4 +333,4 @@ implementation phase + the standard close-out.
 
 ## Status
 
-`pending`
+`done`

docs/fix/README.md

@@ -17,7 +17,7 @@ this table — history lives in git log + closed issues.
 | [33-stale-envelope-contract](33-stale-envelope-contract/SPEC.md) | Pre-feature-10 envelope contract still stated in orchestration-envelope's head + schema-package README | done | — | [#33](https://github.com/gtrabanco/agentic-workflow/issues/33) |
 | [35-single-pass-closeout-phase](35-single-pass-closeout-phase/SPEC.md) | Single-pass units drop the close-out chain — always emit a final Hardening & PR phase (≥ 2 phases) | done · [#36](https://github.com/gtrabanco/agentic-workflow/pull/36) | — | [#35](https://github.com/gtrabanco/agentic-workflow/issues/35) |
 | [39-publish-schema-oidc-403](39-publish-schema-oidc-403/SPEC.md) | `publish-schema.yml` E403 OIDC — make the failure self-serve in-repo; authorization repair is a manual npm Trusted Publisher step (blocks #38) | done · [#41](https://github.com/gtrabanco/agentic-workflow/pull/41) | — | [#39](https://github.com/gtrabanco/agentic-workflow/issues/39) |
-| [40-bump-skill-internal-only](40-bump-skill-internal-only/SPEC.md) | Reclassify `bump-skill` as internal (`user-invocable: false` + drop from plugin manifest) so the `/bump-skill` menu entry stops leaking into every consumer install; reconcile the 15+13 → 14+14 skill-count docs | pending | — | [#40](https://github.com/gtrabanco/agentic-workflow/issues/40) |
+| [40-bump-skill-internal-only](40-bump-skill-internal-only/SPEC.md) | Reclassify `bump-skill` as internal (`user-invocable: false` + drop from plugin manifest) so the `/bump-skill` menu entry stops leaking into every consumer install; reconcile the 15+13 → 14+14 skill-count docs | done | — | [#40](https://github.com/gtrabanco/agentic-workflow/issues/40) |
 
 
 ---