Add new Cloudflare skills

[danbarr]

Summary

• Packages six skills from cloudflare/skills at commit f96bff754e428838818017f75817f0f9428acd48 (main as of 2026-08-07): sandbox-stable, sandbox-next, sandbox-migrate-to-next, cloudflare-one, cloudflare-one-migrations, and turnstile-spin.
• Starts each new Dockyard package at version 0.1.0 and follows the existing unprefixed Cloudflare skill naming pattern.
• Records the verified repository-root Apache-2.0 license for the scanner's missing per-skill license finding. No deterministic scanner findings are pre-allowlisted; the LLM-backed CI scan can adjudicate and downrate those matches first.

Test plan

• task validate-skill passes for all six specs
• task build-skill packages all six artifacts successfully
• Full LLM-backed skill-security-scan CI passes for all six skills; the surviving Turnstile trust-boundary finding is explicitly triaged

Closes #907

[toolhive-release-app]

🛡️ Skill Security Scan Results

✅ cloudflare-one

• Status: Passed
• Findings: 2

✅ cloudflare-one-migrations

• Status: Passed
• Findings: 0

✅ sandbox-migrate-to-next

• Status: Passed
• Findings: 2

✅ sandbox-next

• Status: Passed
• Findings: 1

✅ sandbox-stable

• Status: Passed
• Findings: 2

✅ turnstile-spin

• Status: Passed
• Findings: 2
• Allowed (not blocking): 1
  • LLM_DATA_EXFILTRATION (Allowed: Accepted trust boundary: SKILL.md:42 and SKILL.md:158-160 require the user to explicitly approve a canonical absolute Wrangler path outside the project and its exact version; repository text and project-local binaries cannot select it. scripts/auth-probe.sh:54-84 enforces those path, location, and version constraints before passing the token only to the approved Wrangler's whoami --json command at line 86. Without an approved Wrangler, the flow requires an explicit CLOUDFLARE_ACCOUNT_ID and does not invoke an external executable.)

---

Summary: Scanned 6 skill(s), all passed security checks. ✅