Sync third-party and MCP marketplace plugins

Constraint: Public skills are published only by explicit administrator action unless they are tracked third-party market sources.
Confidence: high
Scope-risk: narrow
Directive: Keep private/internal skills out of the public marketplace and preserve normal incremental market Git history.
Tested: Marketplace validation passed.

config/external-sources.lock.json

@@ -105,8 +105,8 @@
       "repo": "https://github.com/nextlevelbuilder/ui-ux-pro-max-skill.git",
       "ref": "main",
       "adapter": "claude-skill",
-      "commit": "50d8a7de0900119855614541f15a1a616691eb33",
-      "syncedAt": "2026-10-09T10:26:29Z"
+      "commit": "67803eac81607188194aea9842a723b89326d90d",
+      "syncedAt": "2026-10-11T16:00:00Z"
     },
     {
       "id": "caveman",
@@ -132,8 +132,8 @@
       "repo": "https://github.com/shadcn-ui/ui.git",
       "ref": "main",
       "adapter": "claude-skill",
-      "commit": "c2a67849be260701852b0977ba15eb5f3a0ce2a4",
-      "syncedAt": "2026-10-10T16:00:00Z"
+      "commit": "02cad61166c4c20edbc8a3f71bd720eed4c1f49b",
+      "syncedAt": "2026-10-11T16:00:00Z"
     },
     {
       "id": "frontend-slides",
@@ -168,8 +168,8 @@
       "repo": "https://github.com/hugohe3/ppt-master.git",
       "ref": "main",
       "adapter": "claude-skill",
-      "commit": "b4efe3ddf237a97a42880164759162f8e2412f2f",
-      "syncedAt": "2026-10-08T15:59:59Z"
+      "commit": "ca04346de145ed6462ddf34682848e71df5e20a2",
+      "syncedAt": "2026-10-11T16:00:00Z"
     },
     {
       "id": "grill-me",
@@ -258,8 +258,8 @@
       "repo": "https://github.com/vercel/next.js.git",
       "ref": "canary",
       "adapter": "skill-collection",
-      "commit": "d8bfc3c994670c367e6e31853b78f42e8b7fba85",
-      "syncedAt": "2026-10-10T16:00:00Z"
+      "commit": "d8c1c1b0002db8ccb63b58095f338e8bf423fa99",
+      "syncedAt": "2026-10-11T16:00:00Z"
     },
     {
       "id": "shuorenhua",