Changelog, dev startup, README, AgentHub 0.4.0, model catalog, and landing site (#7)

Branch-length batch covering tooling, the model layer, the Web App and the public
surfaces. Highlights:

- Changelog: a per-release `changelog/<version>/` tree, grouped by the surface each
  change touches, with a root CHANGELOG.md holding one line per release.
- Dev startup: `scripts/dev-prebuild.mjs` serializes the skills+core prebuild behind a
  lock and keeps `pnpm install` current; `pnpm dev` runs server+web together.
- AgentHub 0.3.3 -> 0.4.0: OmniMessage complete payloads carry one opaque `fidelity`
  object in place of item-level `signature`/`phase`, threaded verbatim through Trace,
  replay and resume; malformed classification adapted to the new error types.
- Model layer: a model is always referenced by an explicit `(provider, model_id)` pair.
  The provider is never inferred, guessed or defaulted -- both the catalog inference and
  the unique-match config resolution are gone, and CLI, SDK, server routes and
  run_subagent all require the complete pair. Catalog gains the Qwen Token Plan, Qwen
  Pay-As-You-Go and Fireworks AI gateways, plus an expanded OpenRouter group.
- Web App: catalog preset sync and per-group speed test on the Models page, positional
  slash commands, a markdown renderer, skill-library update reminders, and a vertically
  centred draft page whose upward menus size themselves to the room available.
- Public surfaces: restructured READMEs, the penguin.ooo landing site and blog, refreshed
  benchmark results for both suites, and the demo videos playing on the landing page.

Includes the fixes from a full review of the branch: 23 confirmed findings, among them a
provider-inference bug that could send one vendor's API key to another vendor's endpoint,
and an Escape handler that destroyed the composer's contents unrecoverably.

Verified on the branch head: pnpm test (1127 passing, 7 packages), pnpm typecheck and
pnpm format:check clean, Playwright e2e 14/14.

packages/web/e2e/auth.mjs

@@ -1,7 +1,7 @@
 /**
  * e2e auth helper: with signup disabled, test users are always provisioned via
  * the built-in admin account, then logged in. The server seeds an admin
- * (admin / admin123) on startup; a single e2e run shares one data root, and
+ * (admin / penguin-2026) on startup; a single e2e run shares one data root, and
  * provisioning is idempotent (reuses the user if it already exists) so a
  * single spec can be rerun on its own.
  */
@@ -9,7 +9,7 @@ import { request } from "@playwright/test";
 
 const BASE = process.env.BASE_URL;
 export const ADMIN_ID = "admin";
-export const ADMIN_PASSWORD = "admin123";
+export const ADMIN_PASSWORD = "penguin-2026";
 
 /** Log in: the cookie lands in the given request context (page.request is the browser context); returns user. */
 export async function login(ctx, userId, password) {

packages/web/e2e/skills.spec.mjs

@@ -3,7 +3,7 @@
  * - the sidebar nav shows "技能库" ("Skill Library"), and the page renders the library's skill
  *   cards across group sections (a collapsible group header: group name + skill count,
  *   **no icon**; the group name follows the UI language — when the server ships a Chinese
- *   group name it's "Agent 开发 / 数据分析 / Penguin 开发 / 网页开发 / 软件工程", falling back to
+ *   group name it's "办公效率 / 软件开发 / AI 应用开发 / Agent 调优", falling back to
  *   English by default); cards carry a custom icon (icon.svg sanitized then inlined, not the book
  *   fallback), with metadata showing version and usage count (worded semantically, not a bare
  *   number badge);
@@ -35,11 +35,10 @@ const P = "password123";
 // falling back to English (both states are asserted).
 // The group header is a collapsible button (group name + skill count); matched by a substring of its accessible name.
 const GROUPS = [
-  /Agent Development|Agent 开发/,
-  /Data Analysis|数据分析/,
-  /Penguin Development|Penguin 开发/,
-  /Web Development|网页开发/,
-  /Software Engineering|软件工程/,
+  /Office Productivity|办公效率/,
+  /Software Development|软件开发/,
+  /AI App Development|AI 应用开发/,
+  /Agent Tuning|Agent 调优/,
 ];
 const SKILLS = [
   "agent-creation",