Verify each finding against the current code and only fix it if needed.

Inline comments:
In @.github/workflows/catalog-e2e.yml:
- Around line 49-53: Add a pre-check in the "Run catalog installation E2E" step
to fail fast if the vendored skills repo path in AGENTSYNC_LOCAL_SKILLS_REPO is
missing: before running cargo test, check that the directory referenced by the
environment variable AGENTSYNC_LOCAL_SKILLS_REPO exists (e.g., test -d
"$AGENTSYNC_LOCAL_SKILLS_REPO") and output a clear error and exit non-zero if it
does not; update the step that currently runs cargo test to run the directory
existence check first and only proceed to cargo test --test
test_catalog_integration -- --ignored --nocapture when the check passes so the
workflow fails fast on missing vendor checkout.

In `@README.md`:
- Around line 62-66: The README's "Local run" command omits the prerequisite of
having the canonical skills repo available; update the instruction to require
cloning or pointing to a local agents-skills checkout by setting
AGENTSYNC_LOCAL_SKILLS_REPO (or placing a sibling agents-skills checkout) before
running the tests referenced in tests/test_catalog_integration.rs, e.g. instruct
users to git clone the agents-skills repo or export AGENTSYNC_LOCAL_SKILLS_REPO
to the clone path and then run the existing RUN_E2E=1 cargo test command so the
test_catalog_integration can find the canonical repo.

In `@src/commands/skill.rs`:
- Around line 1082-1092: The function infer_install_source_format currently
assumes any HTTP(S) URL that isn't .tar.gz/.tgz is a "zip", which can be
misleading; update infer_install_source_format to explicitly check for ".zip"
(and treat it as "zip"), then for other HTTP(S) URLs return a clearer sentinel
such as "url" or "unknown" instead of always "zip", so callers can distinguish
explicit zip archives from other remote URLs; keep the existing "dir" return for
non-HTTP sources.
- Around line 928-934: The code constructs SkillInstallInfo with a computed
format from infer_install_source_format in the EmbeddedSkillCatalog branch but
that format value is never used by the install pipeline (see
blocking_fetch_and_install_skill and fetch_and_unpack_to_tempdir), so either
remove the dead computation or document its intent: delete the format field
population in the EmbeddedSkillCatalog path (remove the
infer_install_source_format call) if unused, or add a short comment next to
SkillInstallInfo construction (and/or on the SkillInstallInfo type) explaining
the format is informational/reserved for future use; update references to
EmbeddedSkillCatalog, get_install_source, SkillInstallInfo, and
infer_install_source_format accordingly.

In `@src/skills/catalog.rs`:
- Around line 237-244: The method get_skill_definition_by_local_id currently
does a linear scan over self.skill_definitions.values(), which can be slow at
scale; add a reverse index to map local_skill_id to the full definition or to
the provider_skill_id and then do an O(log N)/O(1) lookup. Concretely: add a new
field (e.g. local_to_provider: BTreeMap<String, String> or local_to_definition:
BTreeMap<String, CatalogSkillDefinition>) to the catalog struct, populate and
maintain it wherever skills are inserted/updated/removed (the same code paths
that touch skill_definitions and local_skills/CatalogSkillMetadata), and change
get_skill_definition_by_local_id to consult this new map (lookup provider id
then return skill_definitions.get(...) or return the stored definition
directly).

In `@src/skills/catalog.v1.toml`:
- Around line 807-812: The provider_skill_id
"nodnarbnitram/claude-code-extensions/tauri-v2" does not match the
install_source repository "https://github.com/delexw/claude-code-misc...";
update the metadata so they align by either changing provider_skill_id to
"delexw/claude-code-misc/tauri-v2" (or the correct owner/path) to match
install_source, or add a clarifying comment/field documenting that the skill was
forked/moved and kept local_skill_id "tauri-v2" and title "Tauri v2"
intentionally point to the delexw repo; ensure provider_skill_id,
install_source, and any publishing metadata consistently reference the same
source.

In `@src/skills/suggest.rs`:
- Around line 331-334: annotate_recommendations currently checks installed
status by directly doing get(&recommendation.skill_id), which ignores
legacy_local_skill_ids; update annotate_recommendations to call
installed_state_for_recommendation(&installed_skill_states, recommendation) (the
same helper used by build_response) when computing the installed state and then
pass that into recommendation.annotate_installed_state(...), so renamed/aliased
skills are correctly detected for callers like recommend_skills ->
annotate_recommendations; ensure you reference the existing
installed_skill_states parameter and the installed_state_for_recommendation
helper rather than direct map lookups.

In `@tests/test_catalog_integration.rs`:
- Around line 45-62: The test helper resolve_install_source duplicates
resolution logic from SuggestInstallProvider::resolve; replace the duplicated
logic by reusing the production resolver or extracting the shared resolution
into a common function: either (A) call
SuggestInstallProvider::default().resolve(provider_skill_id) and return its
download_url (expose SuggestInstallProvider if necessary), or (B) move the
resolution logic that checks EmbeddedSkillCatalog::get_install_source,
DALLAY_SKILLS_PREFIX handling, and provider.resolve into a new shared function
(e.g., resolve_install_source_shared) used by both the test and
src/commands/skill.rs; update imports and signatures (local_skill_source_dir,
EmbeddedSkillCatalog, DALLAY_SKILLS_PREFIX) accordingly.
- Around line 64-76: install_with_retry currently discards the details of the
first failure if the retry succeeds; modify install_with_retry (which calls
blocking_fetch_and_install_skill) to log the first_error before sleeping and
retrying so the initial failure is available for debugging (use the project's
logging facility or eprintln!/warn! as appropriate), then keep the existing
retry behavior and existing combined anyhow::anyhow! on double failure.