feat(skill): refresh remote CLI environment per request

[guima-why]

Summary

• add an allowlisted remote aliyun CLI environment-forwarding configuration
• capture forwarded values per foreground request so a long-lived manager does not reuse stale routing values
• keep transient values out of persisted job state
• split the ROS Agent bridge into source shards below the 128 KiB package limit
• update Skill packaging contracts, CI compilation, documentation, and regression coverage

Validation

• 164 focused Skill bridge/runtime tests passed
• make lint passed
• Skill package validation passed
• local E2E verified STAROPS_HIL switching from endpoint A to B for the same manager, job, and ROS session while A was offline