Sync Skill Repo Backend

Use skillcraft for ownership and revision decisions. This hidden skill preserves explicit compatibility and owns only deterministic publication mechanics.

Canonical batch command

uv run python <skill-root>/scripts/sync_skill_repo.py publish-batch \
  --repo <source-repository> \
  --skill <name> [--skill <name> ...] \
  [--include-path <explicit-path>] \
  [--project-root <consumer-project>] \
  [--expected-upstream-head <sha> --expected-source-head <sha>]

The runner validates budgets and references, runs each scripts/tests/run.py, stages only explicit paths, creates at most one commit, pushes once, runs pnpm dlx skills update <name> -y once per name from a neutral cwd, verifies matching installations and locks, and emits sync-skill-repo.publish-receipt.v2 JSON.

Existing ahead commits require both exact head arguments. Input under package/node_modules, project-private source, skills-config, ambiguous locks, unrelated dirty paths, non-GitHub upstreams, stale heads, or missing update locks fails closed. A push followed by update failure returns completed: false.