feat: add GEWU installer and service contracts

skills/kb-ingest/SKILL.md

@@ -6,7 +6,7 @@ description: Process explicitly selected sources for a GEWU project into evidenc
 
 Read the pack's [evidence](../../protocols/EVIDENCE.md), [scope](../../protocols/SCOPE.md) and [contribution](../../protocols/CONTRIBUTIONS.md) protocols, then use the [ingestion pipeline](../../pipelines/ingest.md).
 
-Inputs are the selected source(s), explicit project and the user's research objective. Inspect existing source identity/revisions before creating duplicates. Retrieve the project lens and supported tool/schema contract; use the connector for local byte transfer. If the service is unavailable, report the blocked stage and only prepare an unaccepted local draft when that work was requested.
+Inputs are the selected source(s), explicit project and the user's research objective. Use `get_project_context` for the selected project’s authoritative north star, key questions, watch list and taxonomy extensions. The tool requires project read permission and does not expose the autonomy policy. Verify the supported tool/schema contract. Use the connector for local byte transfer; it returns a typed source metadata candidate without exposing the selected path or bytes. Selected `.vtt` and `.srt` files produce timestamped transcript cues; cite exact cue start/end times and the quote span. A declared NotebookLM export label is metadata only and is not export verification. For text explicitly pasted by the user, use `source_capture_text` with a stable capture ID and source key; it accepts UTF-8 plain text or Markdown up to 1 MB, archives and extracts it, and returns a typed candidate marked `capture_method=pasted-text`. Retry uncertain calls with the same capture ID and identical inputs; changed input under that ID conflicts. It does not register the candidate. `source_capture_url` fetches only operator-allowlisted public hosts and stages supported text, Markdown, HTML or PDF bytes; it also returns a source metadata candidate but does not register it. Submit candidates with the normal typed proposal flow, and use `capture-failed` candidates only as bookmarks, never as factual evidence. URL source IDs follow the sanitized URL; local source IDs follow the connector's configured file ID; pasted-text source IDs are derived from the supplied stable key and revision IDs include the content digest. PDF extraction currently requires Linux bubblewrap, Poppler and prlimit. Unsupported formats and unavailable parsers must be reported without inventing an extraction. If the service is unavailable, report the blocked stage and only prepare an unaccepted local draft when that work was requested.
 
 Extract useful atomic assertions, problems, techniques or cases with their conditions. Preserve the service's exact source/extraction/location bindings. Map each factual field to evidence; assess semantic support separately. Record triage exclusions and skipped/deferred sections. Optimize for useful coverage rather than maximum note count.