chore(agents): sync agent configs, models, capability index; cleanup junk

- Update agent model assignments (minimax/glm -> nemotron-3-ultra, kimi-k2.7-code, qwen3.5:397b) in .kilo/agents, kilo-meta.json, kilo.jsonc, capability-index.yaml
- Update orchestrator/agent prompts (complexity fast-path, verification tests, close-loop audit)
- Add .kilo/KILO_SPEC.md (Kilo Code specification reference)
- AGENTS.md: consolidate smartadmin agent rows
- Remove screenshot-dash.cjs (unused, contained hardcoded admin token); gitignore it
- Remove empty .kilo/milestones/

.kilo/agents/code-skeptic.md

@@ -1,7 +1,7 @@
 ---
 description: Adversarial code reviewer. Finds problems and issues. Does NOT suggest implementations (GNS-2 Tier 0)
 mode: all
-model: ollama-cloud/glm-5.2
+model: ollama-cloud/kimi-k2.7-code
 variant: thinking
 color: "#E11D48"
 permission:
@@ -86,4 +86,17 @@ After completion, recommend next agent in event footer:
 - `security-auditor`: after performance reviewed
 
 
+## Verification Test Generation
+
+When bugs or issues are found, the skeptic MUST emit a verification test that would have caught each bug, plus the expected assertion. These tests are included in the GNS_EVENT footer as `verification_tests` so downstream agents (the-fixer) can run them.
+
+```js
+// Example: verification test for missing null check
+// test('should reject null user input', () => {
+//   expect(() => processUser(null)).toThrow('User cannot be null');
+// });
+```
+
+Each entry: `{test_name, test_code, catches}` — describes what the test catches.
+
 <gitea-commenting required="true" skill="gitea-commenting" />