docs(skills): align skills with production CLI and API behavior - #14

Summary

• Align all 8 skills with production (sim main, v0.9.53), checked against the generated CLI reference and the v2 contracts.
• Fix wrong guidance:
  • Stored deployment versions keep credentials; only versions get is sanitized, so diff with versions compare. Revert overwrites the draft with credentials included and can't be undone; activate/rollback change what's live and leave the draft.
  • Manual runs, tool calls, and file sharing accept OAuth logins, not only personal keys; read-only keys get 403 READ_ONLY_API_KEY.
  • Workflow lint now checks <block.output> references (unknown block, unknown top-level field, unquoted JSON strings); the skill lists what it still doesn't cover.
  • logs get NOT_FOUND only means no log row exists yet; use runs get for lifecycle state.
  • Connector config fields need connector-types list --detail full.
• Fix an unsafe default: table groups default to autoRun: true (every later row fires a metered run) and deployed mode, so the example now sets both explicitly.
• Add warnings for irreversible knowledge operations (tags cleanup --no-unused, connectors delete --delete-documents) and for republishing a protected chat without its auth settings (it becomes public).
• Add short guidance on --wait-timeout, pause/resume by contextId, async deploys and trigger health, file revisions/versions and search completeness, {{SECRET}} connector keys, and bulk table operations.
• List files and run-tool in the plugin manifests; bump to 0.1.1.

Test plan

• bun run check:skills
• bun run lint:check
• bun run test
• bun run type-check