Add a validator for registry/<namespace>/skills/README.md that checks top-level keys, the sources[].repo format, per-skill override shape, icon path prefix (3-deep for skills, distinct from modules/templates which are 4-deep), and tag URL-safety. Closes the readmevalidation gap flagged in PR review.