Sync third-party and MCP marketplace plugins

Constraint: Public skills are published only by explicit administrator action unless they are tracked third-party market sources.
Confidence: high
Scope-risk: narrow
Directive: Keep private/internal skills out of the public marketplace and preserve normal incremental market Git history.
Tested: Marketplace validation passed.

config/external-sources.lock.json

@@ -114,8 +114,8 @@
       "repo": "https://github.com/JuliusBrussee/caveman.git",
       "ref": "main",
       "adapter": "codex-plugin",
-      "commit": "2e08b9177c07bb7249a8a2d1a6758e5db281d002",
-      "syncedAt": "2026-10-08T15:59:59Z"
+      "commit": "d262ab3882952a59312ff3537cd86d894523c5ab",
+      "syncedAt": "2026-10-14T02:09:15Z"
     },
     {
       "id": "taste-skill",
@@ -123,8 +123,8 @@
       "repo": "https://github.com/Leonxlnx/taste-skill.git",
       "ref": "main",
       "adapter": "skill-collection",
-      "commit": "d237dd399d57524945c0c81327da5da19f7a468d",
-      "syncedAt": "2026-10-12T15:59:59Z"
+      "commit": "a60a36dc2bb3bb77ccf17f2f62041f5ca8a458b9",
+      "syncedAt": "2026-10-14T02:09:15Z"
     },
     {
       "id": "shadcn",
@@ -132,8 +132,8 @@
       "repo": "https://github.com/shadcn-ui/ui.git",
       "ref": "main",
       "adapter": "claude-skill",
-      "commit": "993eb2c3151997ce08a49635c10fd8c8ef3713c7",
-      "syncedAt": "2026-10-12T15:59:59Z"
+      "commit": "30a58d4498f270af1c1e981a7d78a15cf5740841",
+      "syncedAt": "2026-10-14T02:09:15Z"
     },
     {
       "id": "frontend-slides",
@@ -168,8 +168,8 @@
       "repo": "https://github.com/hugohe3/ppt-master.git",
       "ref": "main",
       "adapter": "claude-skill",
-      "commit": "ca04346de145ed6462ddf34682848e71df5e20a2",
-      "syncedAt": "2026-10-11T16:00:00Z"
+      "commit": "bf89859cbf3c5f5974de70e0dd2ccf2239c8c51b",
+      "syncedAt": "2026-10-14T02:09:15Z"
     },
     {
       "id": "grill-me",
@@ -258,8 +258,8 @@
       "repo": "https://github.com/vercel/next.js.git",
       "ref": "canary",
       "adapter": "skill-collection",
-      "commit": "a7fd0aa6d4e0eb3cbea4b24e27dc82ad65b8a388",
-      "syncedAt": "2026-10-12T15:59:59Z"
+      "commit": "6cc25f4f27cb01b10cab07e9c81cf016b5251274",
+      "syncedAt": "2026-10-14T02:09:15Z"
     },
     {
       "id": "shuorenhua",