De-slop: remove every em-dash + banned words across all modules + capstone (#94)

Co-authored-by: claude <claude@jpaul.io>
Co-committed-by: claude <claude@jpaul.io>

modules/22-securing-third-party-mcp-and-skills/lab/audit.sh

@@ -1,10 +1,10 @@
 #!/usr/bin/env bash
 #
-# audit.sh — a runnable version of the Module 22 vetting checklist.
+# audit.sh: a runnable version of the Module 22 vetting checklist.
 #
 # Static red-flag scan over a third-party MCP server or skill BEFORE you install it. It does not
 # execute anything in the target; it only reads. A clean run is NOT a guarantee (see "Where it
-# breaks") — it is a cheap first pass that catches the obvious and the lazy.
+# breaks"); it is a cheap first pass that catches the obvious and the lazy.
 #
 # Usage:  bash audit.sh <path-to-skill-or-server-dir>
 #
@@ -19,7 +19,7 @@ fi
 hits=0
 section () { printf '\n=== %s ===\n' "$1"; }
 
-# scan <label> <regex>  — grep the tree, print matches, count a hit if found
+# scan <label> <regex>: grep the tree, print matches, count a hit if found
 scan () {
   local label="$1" regex="$2" out
   out=$(grep -rIinE "$regex" "$TARGET" 2>/dev/null || true)
@@ -79,7 +79,7 @@ fi
 
 section "Verdict"
 if (( hits > 0 )); then
-  echo "REJECT (or sandbox + scope) — $hits red-flag categor$([[ $hits -eq 1 ]] && echo y || echo ies) tripped."
+  echo "REJECT (or sandbox + scope): $hits red-flag categor$([[ $hits -eq 1 ]] && echo y || echo ies) tripped."
   echo "Read the flagged lines above against what the skill CLAIMS to do."
   exit 1
 else