feat: add PI-Desktop Install Guard and PI Matt Workflow skill packs

[YahooYuan666]

Summary

Add two community skill packs:

1. local.pi-desktop-install-guard 1.2.0 — PI-Desktop Install Guard / 一次装到位. Teaches the agent how to write a PI-Desktop plugin (official templates, marketplace fields, unique skill filenames) and how to nail a formal install (PluginScaffold → PluginCheck → PluginPack → Plugins page .piplug). Distinguishes PI-Desktop from PI CLI. Not a Windows desktop-layout or shortcut installer.
2. local.pi-matt-workflow 1.1.1 — PI Matt Workflow. Matt Pocock engineering skills for PI-Desktop (plan, implement, test, review) plus a PI-native gate. No memory, media, or MCP.

Media relay and Conversation Memory are not in this PR.

Why local.* ids

These started as personal Desktop plugins. Community plugins often use io.github.<user>.*. Happy to rename to io.github.yahooyuan666.* if maintainers want reverse-DNS before merge.

Capability / data flow

Plugin	Permission	Data	Direction
both	agent.prompt.inject	markdown under skills/ (and install-guard references/)	injected into the current agent session; no chat logs, no network, no filesystem writes
both	fs / net / clipboard / MCP / tools	none	not requested

main.js exports empty onLoad / onUnload. No agent tools, no panel, no secrets.

This is high risk by capability (agent.prompt.inject) per SECURITY.md, even though the plugins only inject instruction documents. Two independent maintainer reviews are expected.

Pack / catalog

Plugin	Version	Size	sha256
local.pi-desktop-install-guard	1.2.0	27275	d33fd978cf9c17fd58da30c234d7eea54424f7daf1bd6d4264d462c316f20a11
local.pi-matt-workflow	1.1.1	237989	caa4a57b94e7d77c47e77bf23440728123321a277306fc2d5ece0563f92599cd

• Packed with python3 scripts/pack_plugin.py
• Catalog rebuilt with python3 scripts/rebuild_catalog.py (not hand-edited)
• Package bytes match current plugin source
• python3 scripts/security_audit.py plugins/local.pi-desktop-install-guard plugins/local.pi-matt-workflow — 0 blockers
• Repo-wide --check-packages fails on existing packages on Windows because checkout CRLF does not match Linux-packed .piplug bytes. That is pre-existing; this PR does not repack other plugins.

Tests

node --test tests/install-guard.test.mjs tests/matt-workflow.test.mjs tests/catalog-author.test.mjs

Asserts exact permission list ["agent.prompt.inject"], versions, bilingual i18n, unique kebab skill filenames, and no SKILL.md entries.

Checklist

• Unique id
• Semantic version
• README explains what/why/permissions (bilingual purpose / not)
• python3 scripts/pack_plugin.py ... succeeds
• python3 scripts/rebuild_catalog.py updated catalog.json
• Package sha256 in catalog matches the .piplug
• No secrets in source or package
• Security audit on these two plugins: 0 blockers
• High-risk agent.prompt.inject: two independent maintainer approvals

[vercel]

@YahooYuan666 is attempting to deploy a commit to the vastsa's projects Team on Vercel.

A member of the Team first needs to authorize it.