fix(cursor): discover symlinked skills as package boundaries - #9420

Eligibility
This is a narrowly scoped Cursor skill-discovery bug fix that recognizes externally symlinked packages without traversing their target trees. Existing cycle and scan-budget protections remain in place, and a regression test covers both discovery and the traversal boundary.

Notes:
No code owners found in target merge base fff33f9