docs(readme): canonical tagline, keep the descriptive line under it (TAG-1)

[jothimani-rajendran]

What

TAG-1 for this repo: README.md lines 7–8 only.

• Line 7 becomes the bold tagline: A kill switch for your Copilot agent's wrong moves.
• Line 8 keeps the old descriptive sentence, unchanged and no longer bold: Chock policies for Copilot CLI and VS Code agent mode — a real <code>PreToolUse</code> deny hook where the client supports it.

This follows the pattern in chock-cursor-plugins #10. No other file changes.

Owner decision (2026-10-13)

Tagline (exact): A kill switch for your coding agent's wrong moves. Use an ASCII apostrophe everywhere so README, PyPI and JSON/YAML agree byte for byte.

Plugin repos (claude, cursor, codex, copilot, devin): The README line-6 tagline. Per-agent form: A kill switch for your <Agent> agent's wrong moves. … Owner authorization 2026-10-13: the owner asked for the tagline on every repo. These READMEs are hand-maintained, so the worker edits the tagline line directly, that line only, one draft PR per repo.

Tier: chock's plugin/clients.py maps the copilot plugin's runtime to vscode_copilot, which agentseam rates block+rewrite, so the kill-switch form applies.

Checks

• git grep -n "guardrails for AI coding agents": 0 hits (exit 1).
• chock marketplace build --dist . --check: unmeasured locally; CI's Generated-only runs it.
• Generated-only regenerate-and-diff is already red on main, and not from this PR: the latest main push run, 34175133625, failed. This PR touches README.md only.

🤖 Generated with Claude Code

---

Generated by Claude Code

[jothimani-rajendran]

Generated-only / verify is red on d48996d, but the failure isn't from this PR.

• The step "Verify the lockfile and index match the published tree" passed.
• The failing step is "Regenerate from the catalog and diff". Its visible diff covers generated plugin files under scan-secrets, token-efficiency, verify-dependency-exists and verify-mcp-allowlist (hook scripts, plugin.json, SKILL.md). README.md does not appear in the visible diff. The log tool returned only the last 5,000 lines, so the top of the diff could not be read.
• This PR changes README.md only.
• The same check is already red on main: the latest main push run, 34175133625, failed.

No fix exists to port. The drift needs a catalog republish, which is outside this PR's scope. I haven't re-run the job, because the drift is deterministic. actionlint and zizmor are separate checks.

---

Generated by Claude Code