fix: critical bugs, stale refs, README rewrite, security fixes

- Fix evaluator bypass on last story (moved completion check)
- Fix all stale command name references across README, loop.sh, skills, plugin.json
- Fix explore evaluator false rejects (.loop/ files are expected)
- Fix stderr capture order in headless mode
- Fix shell injection risk in hooks.sh python fallback
- Remove .DS_Store from tracking
- Rewrite README to match current architecture (single entry point, tmux, optional tools)
- Add XcodeBuildMCP and iOS simulator MCP to optional tools docs

install.sh

@@ -5,7 +5,7 @@
 #   1. Copies the harness to ~/.claude/loop/  (prompts, templates, lib, loop.sh)
 #   2. Installs skills as Claude Code commands at ~/.claude/commands/
 #
-# After install, use /loop-init in any project to get started.
+# After install, use /agent-loop:run in any project to get started.
 #
 # Usage:
 #   ./install.sh            # Install
@@ -18,7 +18,7 @@ HARNESS_DIR="$CLAUDE_DIR/loop"
 COMMANDS_DIR="$CLAUDE_DIR/commands"
 SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
 
-SKILLS=(loop-init loop-plan loop-run loop-triage)
+SKILLS=(setup stories run triage)
 
 # --- Colors (if terminal supports them) ---
 if [ -t 1 ]; then
@@ -100,9 +100,7 @@ info "${BOLD}Installation complete.${RESET}"
 echo ""
 echo "  Next steps (inside Claude Code, in any project):"
 echo ""
-echo "    /loop-init        # Set up the loop for your project"
-echo "    /loop-plan        # Generate PRD and sprint contracts"
-echo "    /loop-run         # Run the loop interactively"
+echo "    /agent-loop:run      # Single command — setup, plan, and run"
 echo ""
 echo "  Or run headless:    .loop/loop.sh"
 echo ""