Reconcile held skill inventory and plan native discovery - #817

Scope

• Correct the browser landscape's false installed incumbent while retaining its
  central held source and explicit gap. Document C7's native compaction choice,
  C12's CC-only saved-workflow install, and C13's gated reconciliation steps.
• Base commit:e28d0eec112527ac02659ac23753533b8ed39a73 (source review retains its dated0d5e6506 snapshot).
• Lane:lane:foundation; draft until command-center review.
• Owned paths:catalogs/landscape/skills-lifecycle.json, its existing contract
  test, two dated decisions, inert MinerU registration plan, evidence registry.

SOTA sources

• 0d5e6506:adoption/skills/lifecycle.md:77–86,292–300 and
  docs/lanes.md:94; selected-but-held is distinct from installed, retired-name
  off tombstones remain, hot files rebuilt with native registration last.
• https://code.claude.com/docs/en/context-window.md and
  https://code.claude.com/docs/en/skills:documented compaction/discovery choice.
• https://code.claude.com/docs/en/workflows and
  0d5e6506:examples/claude-native/workflows/README.md:41–68,
  SHA256SUMS,test-envelope.mjs:14,test-contract-mutations.mjs:126.
• agent-lab@e070125dae03b4e44484ccb78d2d65057ad38f40:vendored lane provenance.
• opendatalab/MinerU@c221cc4:skills/mineru,
  LICENSE.md (additional terms). Active registration is gated, not shipped here.
• huggingface/huggingface_hub@bd4a760:
  vendor-generated hf-cli registration is owned by Record skill provenance and native catalog limits #792, not duplicated.

Evidence-class table

Local commands run

Eight focused catalog/input checks after rebase:exit0/0.134s, no skips. Two prior targeted
catalog checks:exit0/0.004s. Two authored metadata mutants rejected after a
retained fixture-call failure. Native registration for five source paths:exit0.

Final nice -n19 ionice -c3 python3 -B scripts/validate.py:exit0,
69components/10366hashedfiles/4profiles/214receipts, integrity/scope only.
The earlier20-second timeout and a stale-registry-snapshot mismatch are retained
limits; final registration starts from the exact rebased main snapshot and adds
only this branch's source rows. Commit source/content then registry last.

Decision record

docs/decisions/2026-10-06-skills-hygiene-and-discovery.md and
docs/decisions/2026-10-06-saved-workflow-install-plan.md.

Host evidence

No evidence/hosts change. No host apply, installation, retirement or native-bar
closure. CC's private host checklist preserves override tombstones/agent backup,
untracked project Dagu and source/license/cumulative budget gates. S4's older
cap-removal proposal is separately corrected; #792/719 dependencies remain.

Checklist

• No GitHub Actions change, secrets, paid surface or main-checkout edits.
• Same-name definitions and pinned role bodies preserved; no workflow installed.
• No skill-used campaign or source/fixture checks promoted to upstream acceptance.
• Final validation passed; source commit ca0a191 and registry-last commit2a017e5 are pushed. PR remains draft; host application and active registration are pending.