feat: add dev-app skill for TickShield app development contract

Guides and constrains eco-app development in independent repos against the
TickShield platform contract: listingKey identity, app.manifest.json fields,
tickshield-node-runtime base image, guard four-gate authz, tenant_id isolation,
portal-sdk host bridge for micro frontends, release-cli publish and store
deployment. Ships copy-ready templates (manifest/Dockerfile/server.js/web
skeleton/Gitea release workflow/PRD) plus a zero-dependency static checker
(scripts/check-app.sh) covering die/warn contract items.

skills/dev-app/references/templates/app.manifest.micro.json

@@ -0,0 +1,33 @@
+{
+  "listingKey": "my-app",
+  "type": "micro",
+  "name": "我的应用",
+  "version": "0.1.0",
+  "icon": "box",
+  "color": "#0d9488",
+  "cat": "tools",
+  "tagline": "一句话说明（≤120 字符）",
+  "desc": "应用描述（≤2000 字符）。",
+  "scopes": ["my-app.read", "my-app.write"],
+  "exchangeTargets": [],
+  "navItems": [
+    { "id": "home", "label": "首页", "path": "/", "icon": "home" },
+    { "id": "settings", "label": "设置", "path": "/settings", "icon": "settings" }
+  ],
+  "dashboard.widgets": [],
+  "aclManifest": {
+    "pages": [
+      {
+        "key": "home",
+        "label": "首页",
+        "audience": "viewer",
+        "defaultForMember": true,
+        "actions": [
+          { "key": "item.create", "label": "新建条目" },
+          { "key": "item.delete", "label": "删除条目" }
+        ]
+      },
+      { "key": "settings", "label": "设置", "audience": "admin", "defaultForMember": false }
+    ]
+  }
+}