plugin: clean legacy socket installs

[gaelic-ghost]

Summary

• add a dry-run-first helper for cleaning legacy socket copied-plugin installs
• align the standalone apple-dev-skills marketplace name with its documented Git-backed install path
• bump maintained socket plugin/version surfaces to 6.3.2

Verification

• uv run scripts/validate_socket_metadata.py
• uv run pytest
• bash .github/scripts/validate_repo_docs.sh (from plugins/apple-dev-skills)
• uv run ruff check scripts/cleanup_legacy_socket_installs.py tests/test_cleanup_legacy_socket_installs.py
• uv run mypy scripts/cleanup_legacy_socket_installs.py tests/test_cleanup_legacy_socket_installs.py

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 1c58c38c58

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Narrow legacy entry detection to socket-specific paths

The cleanup predicate currently treats any local-source marketplace entry whose name matches a socket plugin as legacy, so --apply will delete valid non-legacy entries (for example, a user’s intentional local apple-dev-skills checkout used for development/fallback) just because it is local and name-matched. This makes the helper destructive outside the intended migration case; the match should also verify that the source path corresponds to known socket legacy locations before removing the entry.

Useful? React with 👍 / 👎.