Sync third-party and MCP marketplace plugins

Constraint: Public skills are published only by explicit administrator action unless they are tracked third-party market sources.
Confidence: high
Scope-risk: narrow
Directive: Keep private/internal skills out of the public marketplace and preserve normal incremental market Git history.
Tested: Marketplace validation passed.

config/external-sources.lock.json

@@ -51,8 +51,8 @@
       "repo": "https://github.com/Leonxlnx/taste-skill.git",
       "ref": "main",
       "adapter": "skill-collection",
-      "commit": "98565e65bc3274ddf6eb0838734341714057178b",
-      "syncedAt": "2026-07-21T16:00:00Z"
+      "commit": "1bffae64edbb6b2023d1e78402cd088e9c9f6511",
+      "syncedAt": "2026-07-23T16:00:00Z"
     },
     {
       "id": "shadcn",
@@ -60,8 +60,8 @@
       "repo": "https://github.com/shadcn-ui/ui.git",
       "ref": "main",
       "adapter": "claude-skill",
-      "commit": "3f47b9113a173bac4a72cefda4d4c3f2d89b8ab6",
-      "syncedAt": "2026-07-22T16:00:00Z"
+      "commit": "6cd3f4c65c361ab6554e06a77e6a0af9cf8b6e37",
+      "syncedAt": "2026-07-23T16:00:00Z"
     },
     {
       "id": "frontend-slides",
@@ -96,8 +96,8 @@
       "repo": "https://github.com/hugohe3/ppt-master.git",
       "ref": "main",
       "adapter": "claude-skill",
-      "commit": "89759436bd336beed3a32da15830355bf732b14e",
-      "syncedAt": "2026-07-22T16:00:00Z"
+      "commit": "10f0adc0600ff28a470d55992133b1992c56968a",
+      "syncedAt": "2026-07-23T16:00:00Z"
     },
     {
       "id": "next-skills",
@@ -105,8 +105,8 @@
       "repo": "https://github.com/vercel/next.js.git",
       "ref": "canary",
       "adapter": "skill-collection",
-      "commit": "63f14c6c90c4dae819966e180491eb9b0af16792",
-      "syncedAt": "2026-07-22T16:00:00Z"
+      "commit": "aa4f46a540b7c9176c7c2b7ef22421adb4b5688e",
+      "syncedAt": "2026-07-23T16:00:00Z"
     }
   ]
 }