feat(skill): add AgentHub publication profiles

[guima-why]

Summary

• add deterministic publication profiles for iac-code, alibabacloud-iac-code, and alibabacloud-ros-agent
• add AgentHub-specific Skill templates, least-privilege RAM references, observability, and session identity handling
• harden the iac-code and ROS Agent bridges for credentials, sensitive inputs, host compatibility, and weak-model routing
• preserve the latest upstream StopChat backup and ROS manager startup safeguards

Validation

• uv run pytest -q tests/skill_bridge — 250 passed
• affected A2A, backup, CLI, and session-backup tests — 595 passed
• all three Skill profiles build successfully with deterministic whitelists
• git diff --check