v3.38.0

## v3.38.0 — Init scaffold content drift remediation (ADR-382)

An investigation into `ruflo`'s two install tracks (`npm install` vs. the Claude Code marketplace plugin) surfaced four independently-verified defects in the init scaffold and its own remediation tooling, documented in [ADR-382](v3/docs/adr/ADR-382-init-scaffold-content-drift-remediation.md) and tracked in #2971. All four are fixed in this release.

### Fixed

- **Unfulfilled ADR-128 migrate mitigation** (#2973): ADR-128 Phase 2 removed 9 forked agent files (`coder.md`, `researcher.md`, `reviewer.md`, `tester.md`, `memory-specialist.md`, `security-auditor.md`, `sparc-orchestrator.md`, `goal-planner.md`, `adr-architect.md`) from the init template, making each plugin canonical — but the promised `ruflo migrate` detection for that removal was never implemented. `ruflo migrate status` now detects the gap and prints the exact `ruflo plugins install <plugin>` command to restore each missing agent.
- **Unpinned marketplace-plugin MCP launch** (#2975): `plugins/ruflo-core/.mcp.json` always launched `npx -y @claude-flow/cli@latest`, silently overriding any local `npm install` a user had, causing version divergence between the two install tracks. It now resolves a local install first (mirroring `hook-handler.cjs`'s existing `resolveCliBinForHook()` pattern), falling back to `npx @latest` only when nothing local resolves.
- **3 plugins missing from the marketplace registry** (#2975): `ruflo-agntcy`, `ruflo-bbs-federation`, and `ruflo-business-pods` existed in `plugins/` but were absent from `.claude-plugin/marketplace.json`, making them uninstallable via the marketplace despite being fully built. Registered.
- **Dead CLI/tool references in bundled scaffold content** (#2974): 701 occurrences of the stale `npx claude-flow` invocation form were remapped to `npx @claude-flow/cli@latest` across 142 files. A new CI guard (`scripts/smoke-init-scaffold-references.mjs`, warn-only) now derives live MCP-tool and CLI-subcommand sets and flags any future drift; 410 dead MCP-tool-name references (e.g. `sparc_mode`, `task_orchestrate`, `memory_usage`) were deliberately left FLAGged rather than guessed at, and are tracked as follow-up work rather than silently dropped.

### Notes

- No breaking changes; this is a backward-compatible bug-fix and tooling release.
- The `plugins/ruflo-core` MCP-launch fix applies to the git-based marketplace-plugin install track directly (already effective on `main`); the `migrate.ts` detection and scaffold-content remap ship in this npm release.