Sync third-party and MCP marketplace plugins

Constraint: Public skills are published only by explicit administrator action unless they are tracked third-party market sources.
Confidence: high
Scope-risk: narrow
Directive: Keep private/internal skills out of the public marketplace and preserve normal incremental market Git history.
Tested: Marketplace validation passed.

config/external-sources.lock.json

@@ -51,8 +51,8 @@
       "repo": "https://github.com/JuliusBrussee/caveman.git",
       "ref": "main",
       "adapter": "codex-plugin",
-      "commit": "cc067b2b3813e3187ba656b1d908761ad3e5b904",
-      "syncedAt": "2026-09-16T15:59:59Z"
+      "commit": "c2906c626be1d703b04e203d9f804a263e87f4ef",
+      "syncedAt": "2026-09-17T16:00:00Z"
     },
     {
       "id": "taste-skill",
@@ -69,8 +69,8 @@
       "repo": "https://github.com/shadcn-ui/ui.git",
       "ref": "main",
       "adapter": "claude-skill",
-      "commit": "f5bb039c749afd2d111ad970dfaa9ab30bd90b3b",
-      "syncedAt": "2026-09-16T15:59:59Z"
+      "commit": "a87a63b2ca25143d26c8bd0903e4e9bc77b3f824",
+      "syncedAt": "2026-09-17T16:00:00Z"
     },
     {
       "id": "frontend-slides",
@@ -105,8 +105,8 @@
       "repo": "https://github.com/hugohe3/ppt-master.git",
       "ref": "main",
       "adapter": "claude-skill",
-      "commit": "3b45af2c3dab15626b1d499ea60ce689b7f97a5a",
-      "syncedAt": "2026-09-16T15:59:59Z"
+      "commit": "9c29d7d80d31d6aa658ae0caed9f7f1356b0d72a",
+      "syncedAt": "2026-09-17T16:00:00Z"
     },
     {
       "id": "grill-me",
@@ -114,8 +114,8 @@
       "repo": "https://github.com/mattpocock/skills.git",
       "ref": "main",
       "adapter": "skill-collection",
-      "commit": "959a8e9f1edc3adbe2f7e3054bb6fbefa6696260",
-      "syncedAt": "2026-09-15T16:00:00Z"
+      "commit": "74ca5fe077456a0b3b2f5310cf9430999fd0b5fd",
+      "syncedAt": "2026-09-17T16:00:00Z"
     },
     {
       "id": "updating-gitea-repositories",
@@ -139,10 +139,10 @@
       "id": "hardware-development",
       "pluginName": "hardware-development",
       "repo": "https://git.playones.com/xufeng/hardware-development.git",
-      "ref": "v1.1.0",
+      "ref": "v1.2.0",
       "adapter": "claude-skill",
-      "commit": "057d5e82410c789c0c8b16412c41c119d13cb192",
-      "syncedAt": "2026-09-15T07:53:22Z"
+      "commit": "fcbde2e9cfa14f3fd2e154d7bef6bd264da61fcd",
+      "syncedAt": "2026-09-17T16:00:00Z"
     },
     {
       "id": "embedded-app-pc-debug",
@@ -177,8 +177,8 @@
       "repo": "https://github.com/vercel/next.js.git",
       "ref": "canary",
       "adapter": "skill-collection",
-      "commit": "6130a493168e69c3c72bc1a3d161314ffa77b124",
-      "syncedAt": "2026-09-16T15:59:59Z"
+      "commit": "7d42c9dcdd11b01716eb5a8eb473f493ea5b23c6",
+      "syncedAt": "2026-09-17T16:00:00Z"
     },
     {
       "id": "shuorenhua",