feat: add NIST CSF 2.0 nist_csf field to all 754 cybersecurity skills

Mapped every skill to NIST CSF 2.0 subcategory IDs (GV/ID/PR/DE/RS/RC functions)
based on subdomain and content analysis. Restores 11 skills corrupted during
prior rebase, re-enriching with ATLAS, D3FEND, NIST AI RMF, and CSF 2.0 fields.

All 754 skills now carry structured mappings for all 5 security frameworks:
- MITRE ATT&CK (in tags)
- MITRE ATLAS v5.5 (atlas_techniques)
- MITRE D3FEND v1.3 (d3fend_techniques)
- NIST AI RMF 1.0 (nist_ai_rmf)
- NIST CSF 2.0 (nist_csf)

skills/deploying-osquery-for-endpoint-monitoring/SKILL.md

@@ -1,18 +1,34 @@
 ---
 name: deploying-osquery-for-endpoint-monitoring
-description: >
-  Deploys and configures osquery for real-time endpoint monitoring using SQL-based queries to
-  inspect running processes, open ports, installed software, and system configuration. Use when
-  building visibility into endpoint state, threat hunting across fleet, or implementing
-  compliance monitoring. Activates for requests involving osquery deployment, endpoint visibility,
-  fleet management, or SQL-based endpoint querying.
+description: 'Deploys and configures osquery for real-time endpoint monitoring using SQL-based queries to inspect running
+  processes, open ports, installed software, and system configuration. Use when building visibility into endpoint state, threat
+  hunting across fleet, or implementing compliance monitoring. Activates for requests involving osquery deployment, endpoint
+  visibility, fleet management, or SQL-based endpoint querying.
+
+  '
 domain: cybersecurity
 subdomain: endpoint-security
-tags: [endpoint, osquery, endpoint-monitoring, threat-hunting, fleet-management]
-mitre_attack: ["T1547", "T1049", "T1620", "T1053.003", "T1548.001", "T1552"]
+tags:
+- endpoint
+- osquery
+- endpoint-monitoring
+- threat-hunting
+- fleet-management
+mitre_attack:
+- T1547
+- T1049
+- T1620
+- T1053.003
+- T1548.001
+- T1552
 version: 1.0.0
 author: mahipal
 license: Apache-2.0
+nist_csf:
+- PR.PS-01
+- PR.PS-02
+- DE.CM-01
+- PR.IR-01
 ---
 # Deploying Osquery for Endpoint Monitoring