fix(skill): expose real --query on incident list, drop nonexistent --title

The flashduty-incident skill documented and exemplified a --title flag on
`incident list` that the command never had — only --query exists
(internal/cli/incident.go). An agent following the skill hits cobra
`unknown flag: --title` and falls back to a full TOON dump + grep.

Replace the doc-only --title flag/examples with the real --query (free-text
search across title/labels/content). Three drift sites fixed: the flag table
and example in references/flashduty-incident-list.md, and the merge-workflow
example in SKILL.md. Docs-only; no CLI behavior change.

Found by the AI-SRE production session audit (audit-2026-06-11,
sess_JUm6ZDTmUmdUGE2bH4nFLz).

Author: ysyneu

skills/flashduty-incident/SKILL.md

@@ -81,7 +81,7 @@ Consolidate multiple incidents caused by the same underlying issue.
 
 ```bash
 # 1. Find related incidents by keyword
-flashduty incident list --title "database" --progress Triggered
+flashduty incident list --query "database" --progress Triggered
 
 # 2. Review the results and identify the primary incident
 

skills/flashduty-incident/references/flashduty-incident-list.md

@@ -15,7 +15,7 @@ flashduty incident list [flags]
 | `--progress` | string | | Filter by state: `Triggered`, `Processing`, `Closed` |
 | `--severity` | string | | Filter by severity: `Critical`, `Warning`, `Info` |
 | `--channel` | int | | Filter by channel ID |
-| `--title` | string | | Search by title keyword |
+| `--query` | string | | Free-text search across title, labels, and content |
 | `--since` | string | `24h` | Start time (duration like `24h`, date, datetime, or unix timestamp) |
 | `--until` | string | `now` | End time |
 | `--limit` | int | `20` | Max results (max 100) |
@@ -31,8 +31,8 @@ ID, TITLE, SEVERITY, PROGRESS, CHANNEL, CREATED.
 # Critical incidents in the last hour
 flashduty incident list --severity Critical --since 1h
 
-# Triggered incidents containing "database" in the title
-flashduty incident list --progress Triggered --title "database"
+# Triggered incidents matching "database" (title, labels, or content)
+flashduty incident list --progress Triggered --query "database"
 
 # Closed incidents from a specific channel, page 2
 flashduty incident list --progress Closed --channel 12345 --page 2