enhance(#3085): add Grep to allowed-tools for 21 skills (#4397)

* enhance(#3085): add Grep to allowed-tools for 21 skills

29 of 71 skills omit Grep from allowed-tools, forcing Bash grep for
structured search instead of the dedicated tool. Adds Grep to the
21-skill subset confirmed safe in prior review (excludes the 6
gsd-ns-* dispatchers, gsd-help, and gsd-surface, which have no
plausible structured-search need).

Hand-edits commands/gsd/*.md only; skills/*/SKILL.md is regenerated
via `npm run gen:plugin-skills` from that source. Updates the one
hardcoded copilot-install test assertion affected by gsd-health's
new tool order.

* chore(#3085): backfill changeset PR number

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

* test(#2618): assert the Needs clause on the structured field, not the path-length-dependent bullet

The bullet embeds the todo file's ABSOLUTE path, so its total length
varies by runner tmpdir: on macOS CI, /private/var/folders/… plus the
test harness's gsd-test-run-* wrapper pushed the full bullet to 244
chars — past renderPendingTodoBullet's intended 240-char cap, whose
documented first degradation step drops the Needs clause. The product
behavior is correct (#2618 design); the assertion was runner-dependent.
The extraction is now pinned on json.todos[0].needs; the rendered-bullet
shape stays covered by the path-independent title assertion and the
renderer's own unit rows.

Found blocking #4186's CI on the macOS shard (test landed 30 minutes
earlier in b7406b293f / PR #4384).

---------

Co-authored-by: sim <sim@local>
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>

commands/gsd/cleanup.md

@@ -5,6 +5,7 @@ allowed-tools:
   - Read
   - Write
   - Bash
+  - Grep
   - AskUserQuestion
 requires: [phase]
 ---

commands/gsd/complete-milestone.md

@@ -7,6 +7,7 @@ allowed-tools:
   - Read
   - Write
   - Bash
+  - Grep
 requires: [audit-milestone, discuss-phase, execute-phase, new-milestone, phase, plan-phase, stats, update]
 ---
 

commands/gsd/config.md

@@ -6,6 +6,7 @@ allowed-tools:
   - Read
   - Write
   - Bash
+  - Grep
   - AskUserQuestion
 requires: [code-review, review, settings]
 ---

commands/gsd/debug.md

@@ -6,6 +6,7 @@ allowed-tools:
   - Read
   - Write
   - Bash
+  - Grep
   - Agent
   - AskUserQuestion
 ---

commands/gsd/graphify.md

@@ -5,6 +5,7 @@ argument-hint: "[build|query <term>|status|diff]"
 allowed-tools:
   - Read
   - Bash
+  - Grep
 requires: [config, fast, phase, update]
 ---
 

commands/gsd/health.md

@@ -5,6 +5,7 @@ argument-hint: "[--repair] [--context]"
 allowed-tools:
   - Read
   - Bash
+  - Grep
   - Write
   - AskUserQuestion
 requires: [thread]

commands/gsd/mempalace-capture.md

@@ -5,6 +5,7 @@ argument-hint: "[CONTEXT.md|PLAN.md|SUMMARY.md]"
 allowed-tools:
   - Read
   - Bash
+  - Grep
 requires: [config]
 ---
 

commands/gsd/mempalace-recall.md

@@ -6,6 +6,7 @@ allowed-tools:
   - Read
   - Write
   - Bash
+  - Grep
 requires: [config]
 ---
 

commands/gsd/new-milestone.md

@@ -6,6 +6,7 @@ allowed-tools:
   - Read
   - Write
   - Bash
+  - Grep
   - Agent
   - AskUserQuestion
 requires: [new-project, phase, plan-phase]

commands/gsd/new-project.md

@@ -5,6 +5,7 @@ argument-hint: "[--auto]"
 allowed-tools:
   - Read
   - Bash
+  - Grep
   - Write
   - Agent
   - AskUserQuestion

commands/gsd/next.md

@@ -6,6 +6,7 @@ allowed-tools:
   - Read
   - Bash
   - Glob
+  - Grep
   - SlashCommand
   - AskUserQuestion
 ---

commands/gsd/pause-work.md

@@ -6,6 +6,7 @@ allowed-tools:
   - Read
   - Write
   - Bash
+  - Grep
 requires: [phase, progress]
 ---
 

commands/gsd/phase.md

@@ -7,6 +7,7 @@ allowed-tools:
   - Write
   - Bash
   - Glob
+  - Grep
 ---
 
 <objective>

commands/gsd/pr-branch.md

@@ -4,6 +4,7 @@ description: Create a clean PR branch by filtering out .planning/ commits — re
 argument-hint: "[target branch, default: main]"
 allowed-tools:
   - Bash
+  - Grep
   - Read
   - AskUserQuestion
 requires: [review]

commands/gsd/resume-work.md

@@ -4,6 +4,7 @@ description: Resume work from previous session with full context restoration
 allowed-tools:
   - Read
   - Bash
+  - Grep
   - Write
   - AskUserQuestion
   - SlashCommand

commands/gsd/review-backlog.md

@@ -5,6 +5,7 @@ allowed-tools:
   - Read
   - Write
   - Bash
+  - Grep
   - AskUserQuestion
 requires: [phase, review]
 ---

commands/gsd/settings.md

@@ -5,6 +5,7 @@ allowed-tools:
   - Read
   - Write
   - Bash
+  - Grep
   - AskUserQuestion
 requires: [quick]
 ---

commands/gsd/stats.md

@@ -5,6 +5,7 @@ effort: low
 allowed-tools:
   - Read
   - Bash
+  - Grep
 requires: [phase, progress]
 ---
 <objective>

commands/gsd/thread.md

@@ -6,6 +6,7 @@ allowed-tools:
   - Read
   - Write
   - Bash
+  - Grep
 requires: [phase]
 ---
 

commands/gsd/workspace.md

@@ -6,6 +6,7 @@ allowed-tools:
   - Read
   - Write
   - Bash
+  - Grep
   - AskUserQuestion
 ---
 

commands/gsd/workstreams.md

@@ -4,6 +4,7 @@ description: Manage parallel workstreams — list, create, switch, status, progr
 allowed-tools:
   - Read
   - Bash
+  - Grep
 requires: [new-milestone, phase, progress, resume-work]
 ---