Rewrite 548 skill descriptions to the activation rubric

Each rewritten description now states both what the skill does (concrete
capability, named tools/artifacts) and an explicit when-to-use trigger,
improving agent discovery/activation. Grounded in each skill's own body;
changes confined to the `description` field only (bodies and all other
frontmatter untouched). Produced by a gated audit->rewrite->recheck loop
(548 -> 0 flagged) with a sampled anti-invention check (0 ungrounded).

Schema: 817/817 pass. Framework-ID gate: 0 defects.

skills/implementing-network-segmentation-for-ot/SKILL.md

@@ -1,11 +1,10 @@
 ---
 name: implementing-network-segmentation-for-ot
-description: 'This skill covers implementing network segmentation in Operational Technology
-  environments using VLANs, industrial firewalls, data diodes, and software-defined
-  networking. It addresses the Purdue Model-based segmentation strategy, migration
-  from flat networks to segmented architectures without disrupting operations, configuring
-  OT-aware firewalls with industrial protocol deep packet inspection, and validating
-  segmentation effectiveness through traffic analysis.
+description: 'Implements OT network segmentation using VLANs, OT-aware firewalls, data diodes,
+  and IEC 62443 zone/conduit architecture, with a traffic-baseline-driven design
+  tool for migrating flat Purdue-model networks without disrupting operations. Use
+  when segmenting a flat OT network into Purdue levels, deploying an IT/OT DMZ, or
+  isolating safety instrumented systems from basic process control systems.
 
   '
 domain: cybersecurity