docs: 更新 Control 应用市场入口与服务技能边界 (#181)

## 变更 / Changes
新增 Control 1.4.0 中英文市场安装指南及 README 应用入口，指向真正的应用数据源
desirecore/registry；同步 registering-services / using-services 到 1.0.4，明确
native-app 的对外 MCP 不可注册为内部服务。

Add bilingual marketplace documentation and update both service skills
without duplicating an App as an MCP service. Fixed native application
listing and lifecycle live in Registry; open-source implementation lives
in desirecore-agent/desirecore-cdp-mcp.

## 兼容 / Compatibility
Requires native-app-aware desktop (catalog minimum 10.0.169) and
app-install-manager >=1.4.0. Catalog publication does not upgrade the
desktop or Agent.

## 验证 / Verification
- i18n/catalog validation: 0 errors, 129 existing governance/freshness
warnings retained.
- scoped translation hash check: both skills up to date; no model API
invoked by checks.
- git diff --check passed; unrelated market entries preserved.

skills/using-services/SKILL.md

@@ -5,7 +5,7 @@ description: >-
   catalog. Use when the user asks the Agent to call an API, search for an
   existing service, or query a backend that was registered via the
   registering-services skill. 调用某个 API、查找已有服务、访问已注册的后端服务时使用。
-version: 1.0.3
+version: 1.0.4
 type: meta
 risk_level: low
 status: enabled
@@ -18,7 +18,7 @@ tags:
   - meta
 metadata:
   author: desirecore
-  updated_at: '2026-07-29'
+  updated_at: '2026-09-18'
   i18n:
     default_locale: en-US
     source_locale: zh-CN
@@ -38,8 +38,8 @@ metadata:
       description: >-
         Discover and invoke HTTP/MCP services already registered in the global catalog. Use when the user asks the Agent to call an API, search for an existing service, or query a backend that was registered via the registering-services skill.
       body: ./SKILL.md
-      translated_by: human
-      source_hash: sha256:8a20b2835e5e54d1
+      translated_by: ai:chatgpt
+      source_hash: sha256:b841f1996c1d428f
 market:
   icon: >-
     <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="#FFFFFF" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"><rect x="3" y="9" width="6" height="6" rx="1.5"/><rect x="15" y="3" width="6" height="6" rx="1.5"/><rect x="15" y="15" width="6" height="6" rx="1.5"/><path d="M9 11.5h3.5V6H15"/><path d="M9 12.5h3.5V18H15"/></svg>
@@ -52,6 +52,10 @@ market:
 
 # using-services Skill
 
+## Native applications and outward protocols
+
+**DesireCore Control** is a `native-app` for external agents, not an installed internal MCP service. The presence of its dashboard or outward `/mcp` endpoint does not authorize this Agent to invoke it through `using-services`, register it, or bypass GUI approval. Use `app-install-manager` (1.5.2 or newer) for its App lifecycle and the governed `ControlDesireCoreGui` for runtime GUI access. An App installation must not mint an internal service or `svc-*` skill.
+
 ## L0: One-line Summary
 
 Teach the Agent how to look up and call services from the global

skills/using-services/SKILL.zh-CN.md

@@ -2,6 +2,10 @@
 
 # 使用服务（using-services）
 
+## 原生应用与对外协议
+
+**DesireCore Control** 是供外部智能体使用的 `native-app`，不是已经安装的内部 MCP 服务。看到它的管理页或对外 `/mcp` 端点，不代表本 Agent 获准通过 `using-services` 调用、注册它或绕过 GUI 审批。应用生命周期使用 `app-install-manager`（1.5.2 或更新版本），运行时 GUI 接管使用受治理的 `ControlDesireCoreGui`。应用安装不得生成内部服务或 `svc-*` 技能。
+
 ## L0：一句话总结
 
 教会 Agent 如何从全局"应用与服务目录"里查找并正确调用服务。

skills/using-services/catalog-metadata.v1.json

@@ -30,14 +30,14 @@
   },
   "release": {
     "state": "known",
-    "version": "1.0.3",
+    "version": "1.0.4",
     "versionScheme": "semver"
   },
   "timestamps": {
     "catalogUpdatedAt": {
       "state": "known",
-      "value": "2026-07-29T09:48:28Z",
-      "precision": "second"
+      "value": "2026-09-18",
+      "precision": "day"
     },
     "releasePublishedAt": {
       "state": "unknown"