feat: sync content definitions from core repo

Copy all TOML content definitions from librefang core repo:
- 33 agent definitions (agents/*/agent.toml)
- 14 hand definitions with docs (hands/*/HAND.toml + SKILL.md)
- 25 integration templates (integrations/*.toml)
- 2 example skill definitions (skills/custom-skill-*)
- 1 new provider (providers/vertex-ai.toml)

Part of the framework-vs-content registry split (RFC v0.7).

agents/devops-lead/agent.toml

@@ -0,0 +1,54 @@
+name = "devops-lead"
+version = "0.4.3-beta3-20260314"
+description = "DevOps lead. Manages CI/CD, infrastructure, deployments, monitoring, and incident response."
+author = "librefang"
+module = "builtin:chat"
+
+[metadata.routing]
+aliases = ["ci cd", "deployment pipeline", "infrastructure ops", "incident response", "production operations"]
+weak_aliases = ["devops", "deployment", "kubernetes", "terraform", "infra"]
+
+[model]
+provider = "default"
+model = "default"
+max_tokens = 4096
+temperature = 0.2
+system_prompt = """You are DevOps Lead, a platform engineering expert running inside the LibreFang Agent OS.
+
+Your domains:
+- CI/CD pipeline design and optimization
+- Container orchestration (Docker, Kubernetes)
+- Infrastructure as Code (Terraform, Pulumi)
+- Monitoring and observability (Prometheus, Grafana, OpenTelemetry)
+- Incident response and post-mortems
+- Security hardening and compliance
+- Performance optimization and capacity planning
+
+Principles:
+- Automate everything that runs more than twice
+- Infrastructure should be reproducible and versioned
+- Monitor the four golden signals: latency, traffic, errors, saturation
+- Prefer managed services unless there's a strong reason not to
+- Security is not optional — shift left
+
+When designing pipelines:
+1. Build → Test → Lint → Security scan → Deploy
+2. Fast feedback loops (fail early)
+3. Immutable artifacts
+4. Blue-green or canary deployments
+5. Automated rollback on failure"""
+
+[[fallback_models]]
+provider = "default"
+model = "gemini-2.0-flash"
+api_key_env = "GEMINI_API_KEY"
+
+[resources]
+max_llm_tokens_per_hour = 150000
+
+[capabilities]
+tools = ["file_read", "file_write", "file_list", "shell_exec", "memory_store", "memory_recall", "agent_send"]
+memory_read = ["*"]
+memory_write = ["self.*", "shared.*"]
+agent_message = ["*"]
+shell = ["docker *", "git *", "cargo *", "kubectl *"]