Sync third-party and MCP marketplace plugins

Constraint: Public skills are published only by explicit administrator action unless they are tracked third-party market sources.
Confidence: high
Scope-risk: narrow
Directive: Keep private/internal skills out of the public marketplace and preserve normal incremental market Git history.
Tested: Marketplace validation passed.

config/external-sources.lock.json

@@ -42,8 +42,17 @@
       "repo": "https://github.com/nextlevelbuilder/ui-ux-pro-max-skill.git",
       "ref": "main",
       "adapter": "claude-skill",
-      "commit": "4aad0584d92131626b16d4ff4d77f0455385013c",
-      "syncedAt": "2026-09-06T15:59:59Z"
+      "commit": "7f69fed6a2717900085f1bc3b263721f8ba025e2",
+      "syncedAt": "2026-09-10T23:40:59Z"
+    },
+    {
+      "id": "caveman",
+      "pluginName": "caveman",
+      "repo": "https://github.com/JuliusBrussee/caveman.git",
+      "ref": "main",
+      "adapter": "codex-plugin",
+      "commit": "15581d14007fd01fb3f132016741962f34936ca2",
+      "syncedAt": "2026-09-10T23:13:42Z"
     },
     {
       "id": "taste-skill",
@@ -96,8 +105,8 @@
       "repo": "https://github.com/hugohe3/ppt-master.git",
       "ref": "main",
       "adapter": "claude-skill",
-      "commit": "64b65839c7f8096a534c872c03d688a2b2491c8f",
-      "syncedAt": "2026-09-09T16:00:00Z"
+      "commit": "09ad58f0d58decc9d30799ca83374ff2604ef16b",
+      "syncedAt": "2026-09-10T23:40:59Z"
     },
     {
       "id": "grill-me",
@@ -121,10 +130,10 @@
       "id": "etunel-role-collaboration",
       "pluginName": "etunel-role-collaboration",
       "repo": "https://git.playones.com/chenmingxuan/EP-Hub-Skill.git",
-      "ref": "v1.0.2",
+      "ref": "v1.0.3",
       "adapter": "claude-skill",
-      "commit": "a08cfd6a3b4bfa38a3b3ac3a5b56bbd56502a514",
-      "syncedAt": "2026-09-09T04:01:45Z"
+      "commit": "20c0de9b3829534685d1f931dc0b574c988eec6b",
+      "syncedAt": "2026-09-10T23:40:59Z"
     },
     {
       "id": "next-skills",
@@ -132,8 +141,8 @@
       "repo": "https://github.com/vercel/next.js.git",
       "ref": "canary",
       "adapter": "skill-collection",
-      "commit": "e0966df11438b1f82e06d6f650a2a044b84457c3",
-      "syncedAt": "2026-09-09T16:00:00Z"
+      "commit": "ccef3db535aa163a883f6ac000bdceb16b13e5e5",
+      "syncedAt": "2026-09-10T23:40:59Z"
     },
     {
       "id": "shuorenhua",
@@ -143,15 +152,6 @@
       "adapter": "claude-skill",
       "commit": "d2d0ce27da295581c3cf87a30ab65deb7d0ddfb8",
       "syncedAt": "2026-09-03T02:45:43Z"
-    },
-    {
-      "id": "caveman",
-      "pluginName": "caveman",
-      "repo": "https://github.com/JuliusBrussee/caveman.git",
-      "ref": "main",
-      "adapter": "codex-plugin",
-      "commit": "15581d14007fd01fb3f132016741962f34936ca2",
-      "syncedAt": "2026-09-10T23:13:42Z"
     }
   ]
 }