Verify ingress status after ensure

[silasbrookshaha]

Summary

• require agents to treat monk.cluster.ingress.ensure action success as provisional
• require a follow-up monk.cluster.ingress.status check before reporting ingress ready
• keep route configuration intact and surface disabled/unhealthy ingress when status remains enabled=false, lacks ready instances/endpoints, or logs enable failures
• add a regression script that checks the deployer/editor/workflow guidance stays present in both skill copies

Tests

• /bin/sh tests/ingress-ensure-guidance.sh

Fixes #64

[nooga]

Thanks for the PR. On review this only updates agent-instruction docs and skills, not the actual code path that produces the false 'succeeded' result (src/services/cluster/create.ts / manage.ts). A docs-only change doesn't fix the underlying bug. Closing for now.