Sync third-party and MCP marketplace plugins

Constraint: Public skills are published only by explicit administrator action unless they are tracked third-party market sources.
Confidence: high
Scope-risk: narrow
Directive: Keep private/internal skills out of the public marketplace and preserve normal incremental market Git history.
Tested: Marketplace validation passed.

config/external-sources.lock.json

@@ -94,10 +94,10 @@
       "id": "dingtalk-workspace",
       "pluginName": "dingtalk-workspace",
       "repo": "https://github.com/DingTalk-Real-AI/dingtalk-workspace-cli.git",
-      "ref": "v1.0.63",
+      "ref": "v1.0.64",
       "adapter": "skill-collection",
-      "commit": "4cd5d05393a8748e89d9265eb9f7ec85745a0331",
-      "syncedAt": "2026-10-03T16:00:00Z"
+      "commit": "e2c0cdf97e016ee76687d9c26986c23a26a84738",
+      "syncedAt": "2026-10-14T16:00:00Z"
     },
     {
       "id": "ui-ux-pro-max",
@@ -123,8 +123,8 @@
       "repo": "https://github.com/Leonxlnx/taste-skill.git",
       "ref": "main",
       "adapter": "skill-collection",
-      "commit": "a60a36dc2bb3bb77ccf17f2f62041f5ca8a458b9",
-      "syncedAt": "2026-10-14T02:09:15Z"
+      "commit": "f624f37a8c650b9cc550253104925efe4c8de246",
+      "syncedAt": "2026-10-14T16:00:00Z"
     },
     {
       "id": "shadcn",
@@ -132,8 +132,8 @@
       "repo": "https://github.com/shadcn-ui/ui.git",
       "ref": "main",
       "adapter": "claude-skill",
-      "commit": "30a58d4498f270af1c1e981a7d78a15cf5740841",
-      "syncedAt": "2026-10-14T02:09:15Z"
+      "commit": "4233ed1caded8c38f4bc14b14afe1f93ebcaf966",
+      "syncedAt": "2026-10-14T16:00:00Z"
     },
     {
       "id": "frontend-slides",
@@ -168,8 +168,8 @@
       "repo": "https://github.com/hugohe3/ppt-master.git",
       "ref": "main",
       "adapter": "claude-skill",
-      "commit": "bf89859cbf3c5f5974de70e0dd2ccf2239c8c51b",
-      "syncedAt": "2026-10-14T02:09:15Z"
+      "commit": "8070d3df1f6f54b5fb60a9ae66e79c664f050212",
+      "syncedAt": "2026-10-14T16:00:00Z"
     },
     {
       "id": "grill-me",
@@ -258,8 +258,8 @@
       "repo": "https://github.com/vercel/next.js.git",
       "ref": "canary",
       "adapter": "skill-collection",
-      "commit": "6cc25f4f27cb01b10cab07e9c81cf016b5251274",
-      "syncedAt": "2026-10-14T02:09:15Z"
+      "commit": "2df613dbe00b82a6a684e570bc77e242825182ab",
+      "syncedAt": "2026-10-14T16:00:00Z"
     },
     {
       "id": "shuorenhua",