chore(catalog): bump repo-standard v0.5.0 -> v0.9.0, repo-mailbox stat 406 -> 402

Two stat corrections plus a ref bump, together because release-plugin.mjs left a
half-state that could only be closed with the gate green.

repo-standard v0.5.0 -> v0.9.0 (operator-approved). Approved as "bump to the
latest tag, v0.8.1", but v0.8.1 became unreachable while the session ran:
plugin.json had moved to 0.9.0, and the helper refuses a target its plugin.json
does not match ("asked to release 0.8.1 — bump plugin.json first"). v0.9.0 was
tagged at 22:05 today (1dfd408), plugin.json == README badge == 0.9.0, so it is
a consistent released version and the faithful reading of the approval. Same
breaking v0.8.0 boundary that was already accepted, one minor further.

  Ungated axes re-measured at the new ref, per CLAUDE.md: tests 135 -> 170
  (`node --test` on a `git archive v0.9.0` extract), checks 14 -> 14 (the README
  check table still has 14 rows; v0.6.0-v0.9.0 re-levelled finding CODES under
  existing rows). Badges at v0.9.0 are version/platform/skills-1/license, so
  both numbers stay ungated and rot silently — they were measured, not carried.

repo-mailbox 406 -> 402. This reverses the refusal sent from here 20 minutes ago
(and d60ad40's 406), and the reversal is legitimate rather than a flip-flop: 402
was wrong then and is right now because the REF MOVED underneath it. When
repo-mailbox asked, v0.21.0 did not exist as a tag and the catalog pinned
v0.20.3, whose badge says 406 — writing 402 then would have produced a hard
ERROR and a dangling ref. A parallel session has since bumped the ref to
v0.21.0 (9d04179), and the badge AT that ref says 402. The catalog documents
what installs, so the number follows the tag.

That parallel commit knowingly landed a red gate for the catalog to clean up;
this commit is that cleanup. Gate now: 12 OK, 0 WARN, 0 ERROR, 0 SKIP.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XPz4FNKSn2QwoMhRFn4WNo

.claude-plugin/marketplace.json

@@ -114,7 +114,7 @@
       "source": {
         "source": "url",
         "url": "https://git.fromaitochitta.com/open/repo-standard.git",
-        "ref": "v0.5.0"
+        "ref": "v0.9.0"
       },
       "description": "Per-repo gate for the open/ presentation standard: README first screen, install block, files required by the repo's class, and dead repo references."
     }

README.md

@@ -195,11 +195,11 @@ A local mailbox for coordination between Claude Code sessions in different repos
 - **`board`** — read-only cross-repo attention board: which repos have a live next step, which are blocked and on whom, which owe a reply, and what each costs to move
 - **`route`** — turns four scored traits of the next task into a model/effort row from a closed six-row rubric, with a pasteable startup command and a one-row-cheaper fallback
 
-1 hook · 3 skills · 8 CLI scripts · 406 selftest checks · [Full documentation →](https://git.fromaitochitta.com/open/repo-mailbox)
+1 hook · 3 skills · 8 CLI scripts · 402 selftest checks · [Full documentation →](https://git.fromaitochitta.com/open/repo-mailbox)
 
 ---
 
-### [repo-standard](https://git.fromaitochitta.com/open/repo-standard) `v0.5.0`
+### [repo-standard](https://git.fromaitochitta.com/open/repo-standard) `v0.9.0`
 
 Per-repo gate for the open/ presentation standard: README first screen, install block, files required by the repo's class, and dead repo references.
 
@@ -209,7 +209,7 @@ Per-repo gate for the open/ presentation standard: README first screen, install
 - **The class decides what is required** — plugin, catalog, shared-asset, standalone and org-profile each get their own install form and required files, so a five-line org profile is not measured against a plugin's bar
 - **It records, it does not fix** — findings first, remediation afterwards
 
-1 skill · 14 checks · 135 tests · [Full documentation →](https://git.fromaitochitta.com/open/repo-standard)
+1 skill · 14 checks · 170 tests · [Full documentation →](https://git.fromaitochitta.com/open/repo-standard)
 
 ---