diff --git a/.agents/skills/dotnet-inspect/SKILL.md b/.agents/skills/dotnet-inspect/SKILL.md
index 790282d..86cfc05 100644
--- a/.agents/skills/dotnet-inspect/SKILL.md
+++ b/.agents/skills/dotnet-inspect/SKILL.md
@@ -23,7 +23,7 @@ dnx dotnet-inspect -y -- <command>
 | Inspect overloads | `member Type --platform Lib -m Name -S "Member Index"` |
 | Select an overload | `member Type --platform Lib Name:1` or `Name~digest` |
 | Discover legal query values | `vocabulary -D`; select values with `vocabulary -S Accessibility`, `-S "C# Style Choices" --json`, or `-S "C# Body Kinds"`. |
-| Find rendered body syntax | `body-shape ObjectCreationExpression --library path/to.dll`; load `skill decompiler` for stable kinds and coordinates. |
+| Find rendered body syntax | `library path/to.dll --where "Kind=ObjectCreationExpression"` or `member Type Method:1 --library path/to.dll --where "Kind=InvocationExpression"`; load `skill decompiler` for stable kinds and coordinates. |
 | Compare APIs | `diff --package Foo@old..new --breaking` (`--additive` new APIs); `--alloc-regressions` for perf regressions (allocations up, hot first). |
 | Trace API evolution | `timeline --package Foo@old..new --type Type --members --at all`; omit `--at` to inspect the vector without acquiring packages. |
 | Inspect packages | `package Foo`; use `-D` to discover sections. Load `skill private-feeds` for custom/authenticated sources. |
diff --git a/.github/workflows/apply-repo-conventions.yml b/.github/workflows/apply-repo-conventions.yml
index b872af1..261eb51 100644
--- a/.github/workflows/apply-repo-conventions.yml
+++ b/.github/workflows/apply-repo-conventions.yml
@@ -1,3 +1,4 @@
+# DO NOT EDIT: generated by FacilityApi/Facility/conventions/facility-dotnet-package-workflows
 name: Apply Repository Conventions
 
 on:
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9cf1094..93e2144 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1,3 +1,4 @@
+# DO NOT EDIT: generated by FacilityApi/Facility/conventions/facility-dotnet-package-workflows
 name: Continuous Integration
 
 on:
@@ -65,6 +66,9 @@ jobs:
     runs-on: windows-latest
     needs: build
     if: github.repository_owner == 'FacilityApi' && github.ref == 'refs/heads/master'
+    permissions:
+      contents: write
+      id-token: write
     steps:
     - name: Check out code
       uses: actions/checkout@v6
@@ -75,8 +79,13 @@ jobs:
       with:
         name: nuget-packages
         path: release
+    - name: NuGet login
+      uses: NuGet/login@v1
+      id: nuget-login
+      with:
+        user: ejball
     - name: Publish
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        NUGET_API_KEY: ${{ secrets.NUGET_API_KEY }}
+        NUGET_API_KEY: ${{ steps.nuget-login.outputs.NUGET_API_KEY }}
       run: ./build.ps1 publish --skip package --trigger publish-nuget-output
diff --git a/.github/workflows/copilot-setup-steps.yml b/.github/workflows/copilot-setup-steps.yml
index ef7f555..8771712 100644
--- a/.github/workflows/copilot-setup-steps.yml
+++ b/.github/workflows/copilot-setup-steps.yml
@@ -1,3 +1,4 @@
+# DO NOT EDIT: generated by FacilityApi/Facility/conventions/facility-dotnet-package-workflows
 name: Copilot Setup Steps
 
 on:
diff --git a/apm.lock.yaml b/apm.lock.yaml
index ca0718f..e51da93 100644
--- a/apm.lock.yaml
+++ b/apm.lock.yaml
@@ -1,5 +1,5 @@
 lockfile_version: '1'
-generated_at: '2026-08-18T13:57:57.512160+00:00'
+generated_at: '2026-08-19T13:58:38.464502+00:00'
 apm_version: 0.14.0
 dependencies:
 - repo_url: Faithlife/RepoConventions
@@ -13,10 +13,10 @@ dependencies:
   content_hash: sha256:6e4dc45d96d7adc8f1d3e3300d9ee90eef9c2d0231ea83ad86fed64fca105034
 - repo_url: richlander/dotnet-inspect
   host: github.com
-  resolved_commit: 947ab17c58c5655d12237b732e2c0c935f0e2bfe
+  resolved_commit: 5a9947c923aaa12463a0dcc8762210abbf91b240
   virtual_path: skills/dotnet-inspect
   is_virtual: true
   package_type: claude_skill
   deployed_files:
   - .agents/skills/dotnet-inspect
-  content_hash: sha256:e6f4ca23a05a7496add1db9f6b0a88ff5ae15c2a59d9a24067b19a403d4622d6
+  content_hash: sha256:1092822de07d7bc59706e4796b8ae2c8645334cef9e67ecdc9a0bcf608ea41e6