Add repository skill for seekdb wheel builds

[hnwyllmm]

Summary

• replace the Linux-only repository skill with build-seekdb-python-wheel
• require the build host, seekdb ref, and Python wheel version as explicit inputs
• cover Linux x86_64 and macOS arm64 while applying -DDEFAULT_LOG_LEVEL=OB_LOG_LEVEL_DBA_WARN only to official release builds
• cap both native macOS build stages at -j2
• use standard delocate now that seekdb no longer links unused RE2 on macOS
• reject staged macOS seekdb binaries that dynamically link RE2/Abseil, and reject wheels containing RE2/Abseil or more than 20 bundled dylibs
• document GitHub SSH checkout, proxy cleanup, short TMPDIR, CMake/protoc diagnosis, and Python 3.11-3.14 verification

Why

The packaging workflow is specific to seekdb-bindings and should be discoverable whenever Codex works in this repository. A single parameterized skill covers both supported host platforms without depending on personal global configuration or embedding a real build host.

The earlier macOS wheel contained 73 bundled dylibs because an unused dynamic -lre2 link pulled in RE2 plus 64 componentized Abseil dylibs through delocate. seekdb release/1.3.0 now removes that link, so bindings should use normal wheel repair and guard against the dependency fanout returning instead of rebuilding or rewriting RE2 itself.

Validation

• Skill Creator quick validation passed
• bash -n, script help, dependency-audit functions, and git diff --check passed
• privacy scans found no credential, token, password, private key, or credential-bearing proxy value
• macOS arm64 release build exercised with seekdb aeadfb274c414ccb78ac502c4268b289372fac77 and wheel version 1.3.0.dev5
• actual seekdb compiler command and CMakeCache.txt contain -DDEFAULT_LOG_LEVEL=OB_LOG_LEVEL_DBA_WARN
• cp311-cp311 and cp312-abi3 wheels passed cibuildwheel integration tests; strict abi3 audit reports a Python 3.12 baseline
• full connection-options integration test passed on Python 3.11, 3.12, 3.13, and 3.14
• each wheel contains 8 bundled dylibs and 11 Mach-O files, with no RE2, Abseil, Homebrew absolute path, or build-host path
• every bundled Mach-O passes strict code-signature verification
• wheel SHA-256 values: 13f2ed398673cbdb7c740a301073407d6c8ab96c1407f065047c3e37cd80ba1b and d09e9cf2e56fdc00690b5327610479f4a3612898d11831aa5a77224fdaa69a79
• CMake 4.2 cmake -E env/protoc Subprocess killed issue was reproduced; only the generated build rule was switched to /usr/bin/env, then the native target completed incrementally at -j1
• repository pre-push data-safety hook completed and allowed the push