Add safe managed skill uninstall

CHANGELOG.md

@@ -8,6 +8,8 @@
 - Add a separate `StashLifecycle` Module with a local managed inactive store.
 - Add explicit local `install`/`archive`/`activate`/`deactivate`/`status`
   commands with provenance, tree hashes, tracked deployments, and drift guards.
+- Add `uninstall` for verified managed skills with zero tracked deployments,
+  using recoverable tree and record tombstones without touching sources or hosts.
 - Add guarded local `update` with tree/revision compare-and-swap, source identity
   checks, no-copy metadata advances, recoverable replacement journals, and
   explicit outdated-deployment reporting without automatic deployment mutation.

README.ko.md

@@ -65,12 +65,14 @@ stash install /path/to/rare-skill
 stash status rare-skill
 stash activate rare-skill --host codex
 stash deactivate rare-skill --host codex
+stash uninstall rare-skill
 ```
 
 `archive`는 사용자가 정확히 고른 독립 호스트 스킬을 보관한 뒤 원본을
 제거하는 파괴적 변형입니다. `update`는 기존 관리형 사본만 교체하며 배포본을
 자동으로 덮어쓰지 않습니다. 원격 저장소 내용은 CLI에 전달하기 전에 로컬
-임시 경로에 준비해 검토해야 합니다.
+임시 경로에 준비해 검토해야 합니다. `uninstall`은 검증된 비활성 관리형
+사본만 제거하며, 기록된 배포는 먼저 `deactivate`해야 합니다.
 
 변경 전제조건, provenance, 결과 상태, 일괄 업데이트, 지원 대상은
 [CLI 계약](skills/stash/references/CLI-CONTRACT.md)이 기준입니다. 명령 문법은

README.md

@@ -64,12 +64,14 @@ stash install /path/to/rare-skill
 stash status rare-skill
 stash activate rare-skill --host codex
 stash deactivate rare-skill --host codex
+stash uninstall rare-skill
 ```
 
 `archive` is the destructive variant for one explicitly selected standalone
 host skill. `update` replaces only an existing managed copy and does not rewrite
 deployed copies. Remote repository content must be staged and reviewed locally
-before the CLI sees it.
+before the CLI sees it. `uninstall` removes only an inactive, verified managed
+copy; tracked deployments must be deactivated first.
 
 The [CLI contract](skills/stash/references/CLI-CONTRACT.md) is the authority for
 mutation preconditions, provenance, result states, bulk updates, and supported

SECURITY.md

@@ -23,6 +23,9 @@ Stash discovers, reads, and explicitly stores local Agent Skills. A skill can co
 - Managed update recovery rechecks record/tree state at commit time, preserves a
   drifted previous tree during rollback, and recursively removes only an exact
   operation-owned path after journal authorization.
+- Managed uninstall requires zero deployment records, rechecks a present tree
+  after its same-root rename, and removes only that verified managed tree and
+  lifecycle record. Interrupted cleanup remains journaled.
 - Remote managed provenance uses a canonical repository URL, caller-resolved
   immutable revision, exact case-sensitive repository-relative skill path, and
   exact `HEAD`, `refs/heads/...`, or `refs/tags/...` tracking ref. These four