feat: 收录 REA 逆向分析技能 / add REA reverse-engineering skill (#212)

## 中文

以 `entry.json` 指针与 `catalog-metadata.v1.json` 收录 morluto/rea 的用户技能 `reverse-engineer-anything`，正文留在上游。固定 `source.ref` 951c2aae3be1c357df9f23558d8c09680e64c2cb、`source.path` `.agents/skills/reverse-engineer-anything`，MIT，community/allowed；维护者未验证、上游未背书。双语文案披露另备的 Node.js/npm、rea-agents CLI 或 REA MCP、目标相关引擎与商用许可。

与 #220 合入后的 main 解决 manifest 冲突：技能总数 143，市场版本 1.5.12。验证：catalog 校验 0 errors / 105 既有 warnings，i18n 校验与 translate --check 通过；远端 validate、translate 通过。

## English

List morluto/rea's user-facing `reverse-engineer-anything` skill as a pinned pointer plus catalog metadata; the skill body stays upstream. Pinned to 951c2aae3be1c357df9f23558d8c09680e64c2cb at `.agents/skills/reverse-engineer-anything`, MIT, community/allowed, unverified maintainers, no upstream endorsement. Both locales disclose separately supplied Node.js/npm, the rea-agents CLI or REA MCP, target-specific engines and commercial licenses.

The manifest conflict with main after #220 is resolved: 143 skills, market version 1.5.12. Catalog validation reports 0 errors with 105 existing warnings; i18n validation and translate --check pass; remote validate and translate passed.

manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "DesireCore Official Market",
-  "version": "1.5.11",
+  "version": "1.5.12",
   "schemaVersion": "1.1.0",
   "supportedLocales": [
     "zh-CN",
@@ -31,7 +31,7 @@
   "stats": {
     "totalAgents": 8,
     "totalTeams": 2,
-    "totalSkills": 142,
+    "totalSkills": 143,
     "lastUpdated": "2026-10-18"
   },
   "features": [