feat: P1-19 P1-20 实现 - 边界测试强制 + 高风险审计 + UI Skill 路由

P1-19.1: Arc 边界测试强制
- TaskNode 新增 test_required 字段
- _inject_boundary_tests() 为每个模块注入接口测试和单元测试任务
- Done When 验证必须包含"测试通过"

P1-19.2: AirRvr 高风险审计
- 新增 HighRiskAudit, HighRiskFinding 数据类
- ReviewReport 新增 highRiskAudit 字段，含 lifecycle/nullPointer/danglingPointer/exceptionSafety/concurrency + overallRisk + deliveryVerdict
- 序列化/反序列化支持

P1-19.3: block-release 集成
- dispatch_worker_group() 派发前扫描最新审查报告
- deliveryVerdict=block-release 时阻止所有后续派发
- 记录 eng.blocked 事件

P1-20: frontend-design Skill 集成
- is_ui_task() UI 任务检测
- ensure_frontend_design_skill() 自动安装 Skill
- route_ui_task() UI 任务路由决策
- enter_worker() 集成 UI 检测，skill 不可用时阻止执行
- commands/do.md 更新 UI 处理说明
- SKILL.md 新增 INV-12/INV-13/INV-14

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

commands/do.md

@@ -0,0 +1,54 @@
+---
+description: "AirPlan do mode - task executor with UI skill routing"
+argument-hint: "[enter|status|finish]"
+allowed-tools: "[Read, Glob, Grep, Bash, Write, Edit]"
+---
+
+# /do
+
+AirDo is the task executor. It runs individual tasks, enforces routing rules, and integrates with other AirPlan modes.
+
+## Hard Rules
+
+1. **UI Task Handling (P1-20)** — When task involves UI/frontend/interface design:
+   - Must detect UI tasks via keyword matching (gui, ui, render, widget, frontend, react, vue, etc.)
+   - Must ensure frontend-design Skill is available before executing UI code
+   - If frontend-design Skill is not installed, block the task
+   - Use `ensure_frontend_design_skill()` and `route_ui_task()` functions
+
+2. **Evidence Gate (INV-4)** — Tasks with GUI/network indicators must have corresponding evidence before finishing:
+   - GUI tasks require screenshot/validation evidence
+   - Network tasks require packet capture/connectivity evidence
+   - Code tasks require static analysis/test results
+
+3. **Force AirDbg Routing (INV-4)** — If task finishes without evidence, force route to AirDbg:
+   - `done` status + no validations/files_changed → route to airdbg
+   - `blocked`/`failed` status → always route to airdbg
+
+## Sub-commands
+
+### enter
+
+```bash
+python "$HOME/plugins/airplan/scripts/airplan.py" --mode do --project . --sub enter --task-id T-001 --task-text "实现登录界面UI"
+```
+
+### status
+
+```bash
+python "$HOME/plugins/airplan/scripts/airplan.py" --mode do --project . --sub status
+```
+
+### finish
+
+```bash
+python "$HOME/plugins/airplan/scripts/airplan.py" --mode do --project . --sub finish --task-id T-001 --result /path/to/result.json
+```
+
+## UI Task Detection Keywords
+
+UI task detection uses these keywords (case-insensitive):
+- gui, ui, render, layout, dialog, osd, overlay, visual
+- widget, pane, toolbar, settings_dialog, canvas, button
+- window, popup, menu, drm, kms, opengl, vulkan
+- frontend, react, vue, angular, web, css, html