chore(align): sync Git with running container as authoritative source

One-time alignment to close drift between the running container
(qihu-aiflow / image qihuaiflow:with-deps) and this Git repository.
Container hotfixes previously persisted only via `docker commit` are now
captured in Git so Git becomes the single source of truth.

Backend:
- chat_service.py: accumulated fixes incl. EigenFlux README guidance
- chat_context.py / chat_media.py: URL/web-repo context injection
- api/url_reader.py: NEW SSRF-safe web/README reader (Issue #725)
- skills_admin.py & Skills.tsx: 14-scene capability unification
- pgvector_search.py, orchestrator.py, platform_knowledge.py,
  market.py, admin/models.py: drift sync

Frontend:
- ChatPage.tsx: collapsible AI think/act block (Issue #724)
- MarketPage / EvolutionDashboard / TokenDashboard styling sync

Migrations:
- 018_normalize_marketapp_scene.sql: fixed capability allowlist
  (prevents capability wipe on restart)

Alignment performed 2026-07-23 05:42:47. No deletions; secrets/venv/node_modules/
caches were not touched (tracked-source-only copy).

backend/python/app/api/market.py

@@ -691,7 +691,12 @@ def list_apps(
             "capability": app.capability or None,
             "category": app.category or None,
             "tags": app.tags or None,
-            "installed": (app.id in installed_app_ids or is_user_owned) if user_id else False,
+            # 官方导入并发布的技能默认全局已安装（见 #716：无论前台/后台导入，默认全局安装）
+            "installed": (
+                app.id in installed_app_ids
+                or is_user_owned
+                or (app.source == "official" and app.status == "published")
+            ),
             "version": app.version or "1.0.0",
             "security_scan": app.security_scan,
             "verified": bool(app.verified),
@@ -756,7 +761,8 @@ def get_app(
             "tags": app.tags or None,
             "created_at": str(app.created_at),
             "purchased": purchased,
-            "installed": installed,
+            # 官方导入并发布的技能默认全局已安装（见 #716）
+            "installed": installed or (app.source == "official" and app.status == "published"),
             "version": app.version or "1.0.0",
             "security_scan": app.security_scan,
             "verified": bool(app.verified),