Sync third-party marketplace plugins

Constraint: Public skills are published only by explicit administrator action unless they are tracked third-party market sources.
Confidence: high
Scope-risk: narrow
Directive: Keep private/internal skills out of the public marketplace and preserve normal incremental market Git history.
Tested: Marketplace validation passed.

config/external-sources.lock.json

@@ -42,8 +42,8 @@
       "repo": "https://github.com/zarazhangrui/frontend-slides.git",
       "ref": "main",
       "adapter": "claude-skill",
-      "commit": "871ce4daa13599d6195fe0bb465eb0ed80b2fa44",
-      "syncedAt": "2026-06-11T03:57:53Z"
+      "commit": "c28690100a289d979e5e032b44771a7c28a86e40",
+      "syncedAt": "2026-06-13T16:00:00Z"
     },
     {
       "id": "guizang-ppt-skill",
@@ -69,8 +69,8 @@
       "repo": "https://github.com/hugohe3/ppt-master.git",
       "ref": "main",
       "adapter": "claude-skill",
-      "commit": "2b337bec18c2cb1381fee2dfca2e6f6fed463ce6",
-      "syncedAt": "2026-06-11T03:57:53Z"
+      "commit": "a0d62437f12d4f913a45b3acaadd61bba914f52e",
+      "syncedAt": "2026-06-13T16:00:00Z"
     }
   ]
 }