docs(skills): enforce JD integrity — real posting verbatim + Playwright recipe

Add the JD Integrity section to shared_ops (no reconstructed/inferred JDs;
WebFetch is JS-blind on careers boards; scrape JS-gated postings via the
job_scout Playwright venv; STOP and ask if the real text is unobtainable).
Wire the rule into /make-resume and /critique. Allow cisco/bkw WebFetch.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

.claude/settings.local.json

@@ -114,7 +114,9 @@
       "Bash(.venv/Scripts/python.exe -c \"import scout; print\\('automated:', len\\(scout.COMPANIES\\), '| manual:', len\\(scout.MANUAL_CHECK\\)\\)\")",
       "Bash(.venv/Scripts/python.exe scout.py)",
       "Bash(.venv/Scripts/python.exe scout.py --only=swissgrid)",
-      "Bash(git push *)"
+      "Bash(git push *)",
+      "WebFetch(domain:careers.cisco.com)",
+      "WebFetch(domain:job.bkw.com)"
     ]
   }
 }