chore(release): prepare marketplace 2.0.0

[github-actions]

🤖 Generated by the Agentic Engineer

Why

Consumers need a named marketplace version they can install and return to.

What

Prepare the next marketplace release while keeping individual plugin versions independent. Review and publication remain separate steps.

Part of #101

[devantler]

🤖 Generated by the Agentic Engineer

Proposal evaluation at 726ad9a07bc77d2bc298fe4cc17a0949930ae8dd:

The native workflow's signed commit is verified by GitHub, has source 088e543663ef310bb59b046d4d70a4a7aa8c14d5 as its only parent, and changes only the two marketplace version fields from 1.4.3 to 2.0.0. The major version follows the existing breaking change in the committed release range; individual plugin versions and inventory are unchanged.

Source package validation and the CI-pinned specification validator pass. A fresh native skill installation at the immutable source commit, followed by independent Git-object readback, matched all 26 skill bodies and provenance records plus 115 supporting files. Tag-pinned installation and release publication remain separate, outstanding gates after this proposal merges.

Required current-head CI is still queued or running. This evaluation does not establish promotion or publication clearance.

[devantler]

🤖 Generated by the Agentic Engineer

@coderabbitai full review

[coderabbitai]

⚠️ Action not completed

Review skipped.

[coderabbitai]

Important

Review skipped

This PR was authored by a bot without an assigned CodeRabbit review seat. Ask an organization administrator to assign a seat to the bot. See the seat-assignment guide. After the seat is assigned, request a review again.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: bfbf9ff7-2118-434d-843c-6b0a2d35cb73

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[devantler]

🤖 Generated by the Agentic Engineer

@codex review

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, add credits to your account and enable them for code reviews in your settings.

[devantler]

🤖 Generated by the Agentic Engineer

Self-review (fallback — CodeRabbit, Codex and Cursor Bugbot unavailable)

Reviewed commit: 726ad9a

• CodeRabbit: the current proposal's authenticated command reply and summary at 2026-10-06 00:28:55–00:29:00 UTC refuse this bot-authored PR because it has no assigned review seat. Recovery requires a bot seat; no review was delivered. Evidence.
• Codex: the current proposal's authenticated reply at 2026-10-06 00:30:33 UTC reports account code-review usage limits, with no reset stated. Evidence.
• Cursor Bugbot: freshly reread authenticated user/team quota refusal at 2026-10-05 23:26:22 UTC applies to this account; an administrator must restore capacity, with no reset stated. Current proposal checks contain no Bugbot verdict. Evidence.

I reviewed the complete immutable diff and its release reconstruction. The proposal changes only the marketplace version in the two matching manifests, has the declared source as its sole parent, and carries a verified GitHub signature. The major version follows the existing breaking commit in the baseline-to-source range. Plugin identities, versions, resources and inventory are unchanged. Candidate reconstruction and the real package gate pass; independent native source installation verified all 26 skill bodies and 115 supporting files. Required CI is successful at this exact head. Direct comments, reviews and threads contain no unresolved finding or maintainer instruction.

Publication still requires successful CI at the merged main commit, fresh proposal reconstruction, create-only writes and independent tag/release/consumer readback. This review grants no scheduled rollout change.

Verdict: no P0/P1 findings
No other actionable findings.

[devantler]

🤖 Generated by the Agentic Engineer

Delivered marketplace v2.0.0 at merged commit 72f0f4c6a01e6a4ae59ec5297940dd309641de31, published at 2026-10-06 01:29:44 UTC.

The signed native proposal was reviewed at its exact head and merged through the normal protected path. Exact merged-main CI 37394646354 passed. One explicitly armed native publication run 37398681434 independently reconstructed the merged proposal, rechecked the exact CI and reported PUBLISHED with remote publication readback.

An independent read verified the public release, lightweight tag and current main at that exact commit, plus byte-for-byte release notes against the reviewed publication factory's canonical rendering. A fresh actual native CLI installation pinned to v2.0.0 matched all 26 skill bodies, provenance/tree identities and 115 supporting files against immutable release objects.

The marketplace's major version follows the committed breaking history. Individual plugin versions remain independent. Scheduled rollout flags remain default-off; this observed successful cycle contributes to #277 and does not establish unattended reliability or global runtime-cache adoption.