Publish a package

The zip must contain manifest.json (skill-manifest-v1, id starting with community.) and SKILL.md in the root. New uploads enter the queue as pending and unlock downloads only after approval.