fix(shared): avoid false-positive skill path resolution on npm scoped packages (#2857)

The @scope/path regex incorrectly matched npm scoped package references
like 'require(\"@scope/pkg\")' or '--package=@scope/pkg'. Added context
filtering to exclude matches preceded by npm/import indicators.

🤖 Generated with OhMyOpenCode assistance
https://github.com/code-yeongyu/oh-my-opencode

src/shared/skill-path-resolver.test.ts

@@ -149,4 +149,16 @@ describe("resolveSkillPathReferences", () => {
 		//#then
 		expect(result).toBe("Inspect @data/../../../secret/")
 	})
+
+	it("does not resolve npx --package=@scope/pkg as skill path", () => {
+		//#given
+		const content = "npx --package=@scope/pkg"
+		const basePath = "/skills/frontend"
+
+		//#when
+		const result = resolveSkillPathReferences(content, basePath)
+
+		//#then
+		expect(result).toBe("npx --package=@scope/pkg")
+	})
 })