fix: publish original skills and link upstream authors

[ftchvs]

Summary

• Publish original skills while linking to other authors' original repositories.
• Keep unknown provenance separate instead of treating missing source metadata as authorship.

Changes

• Remove 268 third-party definition snapshots from the current tree; retain Git history and historical license notices.
• Classify the catalog as 10 original skills, 362 upstream links, and 133 unverified entries, plus 19 original workflow playbooks.
• Normalize and check 34 GitHub repository links, update documentation and publication policy, and prevent copied definitions with regression tests.

Test plan

• bun run validate: 25 tests, workflow validation, catalog checks, and publication scan.
• Gitleaks working-tree scan.
• All original definition/playbook targets resolve; third-party targets point outside this repository.
• No third-party definition files remain in the current tree.

Notes

Installed skills are unchanged. Historical copies remain recoverable in Git;
this change does not rewrite public history. Unverified implementations and
private material remain unpublished.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-08T07:12:39.679136Z	9308e1a	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.