feat(aidd-context): cook research and apply actions

[blafourcade]

🎯 What & why

Re-lands the cook research + apply work on next, where it belongs. The original PR #301 was squash-merged straight to main by mistake (its base was main, not next), which also broke main's Commitlint on the leading emoji in its title. This branch carries the identical content, retargeted to next, with a conventional message. The bad main commit is reverted in a separate PR.

🛠️ How it works

Extends 12-cook from author-only (list, upsert) to a full loop.

• research — refine the target with a checklist, fan out one agent per scouting angle (alternatives, new methods, coverage gaps, counter-intuitive wins, deprecations), verify each candidate against an official source, present sorted alternatives + gaps + wins with a recommendation. Ephemeral: writes nothing.
• apply — analyse a recipe, classify each step agent-doable or human-only, ask before mutating, run the chosen steps as a todo list, report the rest.
• Two recipe homes — project aidd_docs/recipes/ overrides bundled assets/recipes/. The project-memory scaffold gains the recipes/ directory (three files, additions only).
• Four bundled recipes and the recipe contract every recipe follows.

🧪 How to verify

ls plugins/aidd-context/skills/12-cook/actions/   # 01-list 02-upsert 03-research 04-apply
ls plugins/aidd-context/skills/12-cook/assets/recipes/   # 4 recipes

⚠️ Two known non-blocking defects, carried from #301

Both are exactly what #418 (the authoring-contract rework) will fix repo-wide; not fixing them here to keep this a faithful re-land:

• The description ends with a keyword list including a /cook token — R5 forbids both.
• The action table still carries the Role | Input columns that refactor(aidd-context): the skill template still teaches the format onboard abandoned #418 drops.

✅ I certify

• I DO CERTIFY I READ EACH LINE OF THE PULL REQUEST BECAUSE I AM A SOFTWARE ENGINEER, NOT A AI PUPPY.