address risk-scan: drop npx http-server example in SKILL.md

Avoid recommending a package-exec command (npx); keep the guidance that any
static file server works and that you just need an http:// origin.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 07e720ee-ca02-419e-9adb-300738b6fc76

Author: jennyf19

skills/daily-focus-board/SKILL.md

@@ -76,7 +76,7 @@ Replace `null` with the config object. Schema:
 opening the file path directly:
 
 - Serve: `python -m http.server 8799` from the board's folder (or `scripts/serve-board.ps1`).
-  If Python isn't available, any static server works (`npx http-server`, etc.).
+  If Python isn't available, any static file server works — you just need an `http://` origin.
 - Open: prefer a **browser canvas** side-panel if the host supports one (best experience —
   it sits next to the chat). Otherwise open `http://localhost:8799/focus-board.html` in the
   default browser.