feat: add NIST CSF 2.0 nist_csf field to all 754 cybersecurity skills

Mapped every skill to NIST CSF 2.0 subcategory IDs (GV/ID/PR/DE/RS/RC functions)
based on subdomain and content analysis. Restores 11 skills corrupted during
prior rebase, re-enriching with ATLAS, D3FEND, NIST AI RMF, and CSF 2.0 fields.

All 754 skills now carry structured mappings for all 5 security frameworks:
- MITRE ATT&CK (in tags)
- MITRE ATLAS v5.5 (atlas_techniques)
- MITRE D3FEND v1.3 (d3fend_techniques)
- NIST AI RMF 1.0 (nist_ai_rmf)
- NIST CSF 2.0 (nist_csf)

skills/analyzing-windows-shellbag-artifacts/SKILL.md

@@ -1,12 +1,29 @@
 ---
 name: analyzing-windows-shellbag-artifacts
-description: Analyze Windows Shellbag registry artifacts to reconstruct folder browsing activity, detect access to removable media and network shares, and establish user interaction with directories even after deletion using SBECmd and ShellBags Explorer.
+description: Analyze Windows Shellbag registry artifacts to reconstruct folder browsing activity, detect access to removable
+  media and network shares, and establish user interaction with directories even after deletion using SBECmd and ShellBags
+  Explorer.
 domain: cybersecurity
 subdomain: digital-forensics
-tags: [shellbags, windows-registry, sbecmd, shellbags-explorer, folder-access, user-activity, removable-media, network-shares, bagmru, dfir]
-version: "1.0"
+tags:
+- shellbags
+- windows-registry
+- sbecmd
+- shellbags-explorer
+- folder-access
+- user-activity
+- removable-media
+- network-shares
+- bagmru
+- dfir
+version: '1.0'
 author: mahipal
 license: Apache-2.0
+nist_csf:
+- RS.AN-01
+- RS.AN-03
+- DE.AE-02
+- RS.MA-01
 ---
 
 # Analyzing Windows Shellbag Artifacts