skill: package pulumi/agent-skills into dockyard

[JAORMX]

Package agent skills from pulumi/agent-skills into the Dockyard registry.

Source

• Repo: https://github.com/pulumi/agent-skills
• License: Apache-2.0
• Upstream HEAD (at survey time): fbeac07 (2026-04-16)
• Skill count upstream: ~8
• Trust signal: Official Pulumi (IaC)

Candidate skills (under authoring/skills/)

• pulumi-esc
• package-usage
• provider-upgrade
• pulumi-automation-api
• pulumi-best-practices
• pulumi-component
• pulumi-upgrade-provider
• upstream-patches

Acceptance criteria

• One spec.yaml per selected skill under skills/<name>/
• spec.ref pinned to an audited upstream commit SHA
• task validate-skill passes for each
• task scan-skill findings triaged
• Single PR grouping all Pulumi skills (branch skills/pulumi)

Part of the vendor-by-vendor sweep following #466 (Trail of Bits).