feat(catalog): sovereign catalog — provenance + de-superpowers (idea 12)

- author: ours / adapted-from frontmatter on all 38 skills (scripts/add-provenance.py, idempotent)
- versions added to vendor copies (caveman x5, find-skills) + active-platform
- README(en/ru): new Sovereignty/Adapted-from section, drop wiki-maintainer & superpowers refs
- project-bootstrap v1.12.0 -> v1.13.0: remove 'use superpowers' trigger from template
  + trigger table; recommend-dont-menu wording no longer references superpowers:brainstorming
- dist rebuilt to 38 (pruned stale update-claude-skills.skill)
- lint: 0 violations, 0 warnings

README.md

@@ -26,7 +26,7 @@ git clone <repo> skills
 cd skills
 bash scripts/install.sh           # copies every skills/* into ~/.claude/skills/
 # or only specific ones:
-bash scripts/install.sh caveman wiki-maintainer
+bash scripts/install.sh using-wiki caveman
 ```
 
 **Linux / macOS (bash):**
@@ -36,7 +36,7 @@ git clone <repo> skills
 cd skills
 bash scripts/install.sh           # copies every skills/* into ~/.claude/skills/
 # or only specific ones:
-bash scripts/install.sh caveman wiki-maintainer
+bash scripts/install.sh using-wiki caveman
 ```
 
 The install target can be overridden with `CLAUDE_SKILLS_DIR=/path bash scripts/install.sh`.
@@ -54,9 +54,8 @@ project's folder and it will, in one pass:
 - create a starter `README.md`
 - lay out `.wiki/` per the [Karpathy LLM Wiki pattern](https://gist.github.com/karpathy/442a6bf555914893e9891c11519de94f) (delegated to [`setup-wiki`](skills/setup-wiki/))
 - lay out `.tasks/` with the canonical task board (delegated to [`setup-tasks`](skills/setup-tasks/))
-- write `CLAUDE.md` with skill triggers (`use superpowers`, `use project wiki`, `use task management system`, `check across all projects`, `we're on Windows`)
+- write `CLAUDE.md` with skill triggers (`use project wiki`, `use task management system`, `check across all projects`, `we're on Windows`)
 - record the skill versions used in `.wiki/concepts/bootstrap-manifest.md` so cross-project layout drift stays debuggable
-- check whether the official `superpowers@claude-plugins-official` plugin is installed and, if not, print the install command — the `use superpowers` trigger is a no-op without it
 
 Two modes, picked automatically: **init** for an empty folder, **upgrade**
 for an existing project (the skill only fills the gaps and never overwrites
@@ -103,6 +102,24 @@ Skip and pending entries land in `dist-hermes/SKIPPED.md` with reasons. Full
 design rationale lives in
 [`.wiki/concepts/hermes-skills-rollout-design.md`](.wiki/concepts/hermes-skills-rollout-design.md).
 
+## Sovereignty / provenance
+
+This catalog is sovereign: every skill is either **authored by us** or an
+**adapted vendored copy** we maintain ourselves. No raw vendor plugins are
+installed as dependencies — anything borrowed is vendored into this repo with
+an explicit `adapted-from` marker in its frontmatter.
+
+| skill | provenance |
+|---|---|
+| `caveman`, `caveman-commit`, `caveman-compress`, `caveman-help`, `caveman-review` | `adapted-from: JuliusBrussee/caveman` (MIT) — vendored copy, upstream pin TBD |
+| `find-skills` | `adapted-from: vercel-labs/skills` (MIT) — vendored copy, upstream pin TBD |
+| all other `skills/*` | `author: ours` |
+
+Adaptation policy: a clone is rewritten to our conventions (`.tasks/` boards,
+`.wiki/concepts/` specs, `using-*` skill names), never shipped with vendor junk,
+and versioned under our own semver. Upstream pins are reviewed by the catalog
+owner on update; no automatic upstream sync.
+
 ## Layout
 
 ```