chore: fail close OMP skills

[zen-agents]

Summary

• replace the subject skill deny-list with the reviewed canonical allowlist
• preserve the existing approved skill surface while failing closed on future global additions

Verification

• canonical subject-policy validation passed for 56 global skills
• cold eng/ops/lab/SEO/client registries matched the approved sets exactly
• repository diff is limited to .omp/config.yml

Tracking: SL-129

[greptile-apps]

Required label not found on this PR.

[coderabbitai]

Important

Review skipped

Auto reviews are limited based on label configuration.

🏷️ Required labels (at least one) (2)

• review:standard
• review:deep

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: ZenSystemAI/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 528b6b3b-eb91-4f3d-9933-9044eb29cf40

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

Warning

Your free Security trial is over. An organization admin can activate Security or dismiss this notice.

---

_{Comment @coderabbitai help to get the list of available commands.}