feat(ack): add structured worker model routing

tests/test_ack_skill.py

@@ -34,6 +34,16 @@ class AckSkillContentTests(unittest.TestCase):
         self.assertIn('display_name: "ACK"', metadata)
         self.assertIn("allow_implicit_invocation: false", metadata)
 
+    def test_model_routing_is_fingerprint_bound_and_does_not_trust_receipt_reuse(self) -> None:
+        content = (
+            REPO_ROOT / "skills" / "ack" / "references" / "model-routing.md"
+        ).read_text(encoding="utf-8")
+
+        self.assertIn("--expected-launch-fingerprint", content)
+        self.assertIn("allowlist-v1", content)
+        self.assertIn("禁止根据持久化 receipt 自动复用", content)
+        self.assertIn("launcher 身份证明", content)
+
     def test_ack_knowledge_resources_and_version_are_present(self) -> None:
         ack_dir = REPO_ROOT / "skills" / "ack"
 
@@ -44,9 +54,17 @@ class AckSkillContentTests(unittest.TestCase):
             "scripts/validate_knowledge.py",
             "scripts/select_knowledge.py",
             "scripts/run_verification.py",
+            "scripts/worker_profiles.py",
+            "scripts/launch_worker.py",
         ):
             self.assertTrue((ack_dir / relative_path).is_file(), relative_path)
-        self.assertEqual((ack_dir / "VERSION").read_text(encoding="utf-8").strip(), "0.9.0")
+        self.assertEqual((ack_dir / "VERSION").read_text(encoding="utf-8").strip(), "0.10.0")
+        self.assertIn(
+            'ackVersion: "<接入时的 ack skill 版本>"',
+            (ack_dir / "templates" / "tasks.template.yaml").read_text(
+                encoding="utf-8"
+            ),
+        )
 
 
 if __name__ == "__main__":