feat(workflow-cross-checker): add pre-flight inter-agent validation agent with gate protocol

- Create .kilo/agents/workflow-cross-checker.md as a process inspector
- Requires bash: ask, task: deny (subagent security compliant)
- Defines Role Boundaries clarifying it does NOT replace code-skeptic, planner, or capability-analyst
- Adds 7-question Uncomfortable Questions Protocol for architecture and conflict validation
- Adds Error Handling table (Gitea API failure, corrupted checkpoint, unreadable logs)
- Inserts Cross-Check Verification (Gate #1/#2/#3) into orchestrator state machine
- Registers agent in kilo-meta.json, kilo.jsonc, capability-index.yaml, AGENTS.md, KILO_SPEC.md
- Model: ollama-cloud/kimi-k2.6 (higher IF 91, better instruction following for structured verdicts)

kilo.jsonc

@@ -518,6 +518,25 @@
           "subagent": "deny"
         }
       }
+    },
+    "workflow-cross-checker": {
+      "description": "Workflow cross-checker and process inspector. Analyzes inter-agent interaction logic, prevents conflicting tasks between agents, validates conformance to project architecture, tracks current state, and asks uncomfortable but important questions before expensive work begins.",
+      "mode": "subagent",
+      "model": "ollama-cloud/kimi-k2.6",
+      "color": "#9333EA",
+      "variant": "thinking",
+      "permission": {
+        "read": "allow",
+        "edit": "allow",
+        "write": "allow",
+        "bash": "ask",
+        "glob": "allow",
+        "grep": "allow",
+        "task": {
+          "*": "deny",
+          "subagent": "deny"
+        }
+      }
     }
   }
 }