Remove a skill from the caller's library

Removes a skill from the authenticated account's library and records a removal tombstone that the next bulk sync will surface in the removals array.

Idempotent: retrying a delete on a skill already removed returns 404 with code: not_in_library. Clients treating 404 as a success for retries is acceptable — no state is lost.