chore(skills): mark the two repo-internal .claude skills metadata.internal (objectstack#25727) (#13514)

<!-- claude-projects-attribution: {"github_login":"os-tesla"} -->
_Requested by **Tesla** · [project
thread](https://claude.ai/code/project/chan_01AXsQkLFKRdQCqQ3RTr6Jao?thread=cmsg_01AXsQkLFKRdQCqQ3RTr6JaoL8sNsjGD2KCCE4QzojaRfw)_

Part of objectstack-ai/objectstack#25727
Part of objectstack-ai/objectstack#25677

Clause-②: no
Metadata-protocol: none

⛔ **Governed surface (`.claude/**`).** This PR stays a draft until an
APPROVED review from an authorized approver (os-zhuang or hotlong) is on
record; the merge-queue leg of the Governed Surface Queue Guard refuses
it otherwise. No agent seat approves it.

## What changes

Round 2 (b) of objectui-readiness 3.
`.claude/skills/objectui-contributor/SKILL.md` and
`.claude/skills/verify/SKILL.md` gain `metadata: internal: true` in
their frontmatter, with a comment saying why. The merged objectstack
repo's create-objectstack test ("skills catalog boundary") requires that
marker on every SKILL.md outside the published `skills/` catalog, so a
repo-root `npx skills add` never offers these repo-internal skills to
customers. Both stay internal (Tesla's decision D, 2026-10-25).
`skills/objectui/SKILL.md` is not touched: it moves into objectstack's
root `skills/` catalog in the cutover commit.
`packages/plugin-dashboard/SKILL.md` got the same marker in
objectui#13512.

Frontmatter only: +8 lines, no instruction text changes.

## Verification (local)

| Gate | Exit / verdict |
|---|---|
| `node scripts/check-governed-queue-guard.mjs --test` over the diff |
GOVERNED (`.claude/**` x2) |
| `node scripts/check-changeset-presence.mjs` | no changeset owed |
| `check:skills-paths`, `check:skill-examples`,
`check:skill-eval-tokens`, `check:control-bytes`,
`check:shell-escape-residue`, `check:new-line-citations`,
`check:lint-rule-coverage` | 0 each |
| vitest: the 6 `scripts/__tests__` files that read `.claude/skills` or
SKILL.md | 0 (305 tests) |

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Session: `https://claude.ai/code/session_01K1ngdG6x8wAt8cjeVx2cSk`

Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: os-zhuang <jack@objectstack.ai>

Author: 3 people

.claude/skills/objectui-contributor/SKILL.md

@@ -2,6 +2,10 @@
 name: objectui-contributor
 description: Repo-internal rules for contributors editing THIS monorepo — the Console reference app (`apps/console`, `@object-ui/app-shell`) and the Shadcn-synced primitives under `packages/components/src/ui/`. Use when working on this repository's own source, not when authoring an app with the published `@object-ui/*` packages.
 user-invocable: false
+metadata:
+  # Hides this skill from `npx skills add` discovery: every SKILL.md outside the
+  # published `skills/` catalog carries this marker.
+  internal: true
 ---
 
 # ObjectUI contributor rules (this repository only)

.claude/skills/verify/SKILL.md

@@ -2,6 +2,10 @@
 name: verify
 description: Verify metadata-admin designer (previews) changes end-to-end in a real browser without a backend, via the console preview gallery.
 user-invocable: false
+metadata:
+  # Hides this skill from `npx skills add` discovery: every SKILL.md outside the
+  # published `skills/` catalog carries this marker.
+  internal: true
 ---
 
 # Verifying metadata-admin designer changes (no backend needed)