add-convex-best-practices-skills

Always inspect the linked repository and skill instructions before running commands. Skills are instructions; permissions and execution still matter.