Sync third-party and MCP marketplace plugins

Constraint: Public skills are published only by explicit administrator action unless they are tracked third-party market sources.
Confidence: high
Scope-risk: narrow
Directive: Keep private/internal skills out of the public marketplace and preserve normal incremental market Git history.
Tested: Marketplace validation passed.

config/external-sources.lock.json

@@ -15,8 +15,8 @@
       "repo": "https://github.com/Yeachan-Heo/oh-my-codex.git",
       "ref": "main",
       "adapter": "codex-plugin",
-      "commit": "f947e3a41c062c25fd107686862b68ee5d1b66a5",
-      "syncedAt": "2026-07-05T16:00:01Z"
+      "commit": "f4110b0ad672c87f2ca31677ba7faee70332875a",
+      "syncedAt": "2026-07-08T16:00:01Z"
     },
     {
       "id": "ui-ux-pro-max",
@@ -51,8 +51,8 @@
       "repo": "https://github.com/shadcn-ui/ui.git",
       "ref": "main",
       "adapter": "claude-skill",
-      "commit": "68e1f171aa8c6ce2e38cb9a7d1463d6bcf357e91",
-      "syncedAt": "2026-07-07T16:00:00Z"
+      "commit": "093a538453d3455159fb12a9cc897e39826f9522",
+      "syncedAt": "2026-07-08T16:00:01Z"
     },
     {
       "id": "frontend-slides",
@@ -87,8 +87,8 @@
       "repo": "https://github.com/hugohe3/ppt-master.git",
       "ref": "main",
       "adapter": "claude-skill",
-      "commit": "0b3f73e5f0868171eef82baef44be660888f6c71",
-      "syncedAt": "2026-07-07T16:00:00Z"
+      "commit": "37427f940014c7d1aa122a3faf9cc16d64d573b6",
+      "syncedAt": "2026-07-08T16:00:01Z"
     },
     {
       "id": "next-skills",
@@ -96,8 +96,8 @@
       "repo": "https://github.com/vercel/next.js.git",
       "ref": "canary",
       "adapter": "skill-collection",
-      "commit": "8b5df172e4908b68f7ef88e8ad2b98070baf9ced",
-      "syncedAt": "2026-07-07T16:00:00Z"
+      "commit": "3c0fd70fc04a9bf26e7c510df9a1b7d393ac65c4",
+      "syncedAt": "2026-07-08T16:00:01Z"
     }
   ]
 }