feat(app): 移除内置agents并添加CORS支持和技能上传优化

移除了agents/registry.json中的所有内置agents配置，将agents数组清空。
为web应用添加了CORS中间件支持，允许指定的前端地址跨域访问。
重构了技能上传功能，增加了LLM重写机制，自动规范化上传的技能格式。
新增了工具名称提取逻辑，从技能正文中自动识别Required Tools段落。
更新了技能学习候选者和草稿的载荷结构，添加评估报告统计信息。
修改了意图路由技能的说明，改进任务状态管理逻辑。

app-instance/backend/beaver/skills/catalog/loader.py

@@ -27,6 +27,7 @@ from beaver.skills.specs.storage import SkillSpecStore
 from .utils import (
     check_requirements,
     escape_xml,
+    extract_required_tool_names,
     get_missing_requirements,
     parse_frontmatter,
     parse_skill_metadata_blob,
@@ -111,13 +112,19 @@ class SkillsLoader:
                 if not include_internal and _truthy(frontmatter.get("internal")):
                     continue
                 normalized_frontmatter = dict(frontmatter)
+                meta_blob = parse_skill_metadata_blob(frontmatter.get("metadata", ""))
                 record = SkillRecord(
                     name=name,
                     path=skill_file,
                     source=source,
                     version="legacy",
                     source_kind=source,
-                    tool_hints=self._coerce_tool_names(frontmatter.get("tools")),
+                    tool_hints=self._merge_tool_names(
+                        self._coerce_tool_names(frontmatter.get("tools")),
+                        self._coerce_tool_names(meta_blob.get("tools")),
+                        self._coerce_tool_names(meta_blob.get("required_tools")),
+                        extract_required_tool_names(body),
+                    ),
                     frontmatter=normalized_frontmatter,
                     description=str(frontmatter.get("description") or summarize_body(body) or name),
                 )
@@ -138,6 +145,7 @@ class SkillsLoader:
                 path = self.workspace_skills / name / "SKILL.md"
             else:
                 path = self.workspace_skills / name / "versions" / loaded.version.version / "SKILL.md"
+            _frontmatter, body = parse_frontmatter(loaded.content)
             record = SkillRecord(
                 name=name,
                 path=path,
@@ -146,7 +154,10 @@ class SkillsLoader:
                 content_hash=loaded.version.content_hash,
                 source_kind=str(loaded.version.provenance.get("source_kind") or "workspace"),
                 status=str(loaded.version.review_state or "published"),
-                tool_hints=list(loaded.version.tool_hints),
+                tool_hints=self._merge_tool_names(
+                    loaded.version.tool_hints,
+                    extract_required_tool_names(body),
+                ),
                 frontmatter=dict(loaded.version.frontmatter),
                 description=str(loaded.version.frontmatter.get("description") or loaded.version.summary or name),
             )
@@ -201,23 +212,32 @@ class SkillsLoader:
             - read_file
             - search_files
         - 兼容 metadata JSON blob 里的 `tools`
+        - 兼容 canonical 正文 `## Required Tools` 段落
         """
 
         record = self._find_record(name)
         if record is not None and record.tool_hints:
             return list(record.tool_hints)
 
-        frontmatter = self.get_skill_metadata(name) or {}
+        content = self.load_published_skill(name) or self.load_skill(name) or ""
+        frontmatter, body = parse_frontmatter(content)
+        frontmatter = frontmatter or self.get_skill_metadata(name) or {}
         meta_blob = parse_skill_metadata_blob(frontmatter.get("metadata", ""))
-        names = [
-            *self._coerce_tool_names(frontmatter.get("tools")),
-            *self._coerce_tool_names(meta_blob.get("tools")),
-            *self._coerce_tool_names(meta_blob.get("required_tools")),
-        ]
+        names = self._merge_tool_names(
+            self._coerce_tool_names(frontmatter.get("tools")),
+            self._coerce_tool_names(meta_blob.get("tools")),
+            self._coerce_tool_names(meta_blob.get("required_tools")),
+            extract_required_tool_names(body),
+        )
+        return names
+
+    @staticmethod
+    def _merge_tool_names(*groups: Any) -> list[str]:
         result: list[str] = []
-        for item in names:
-            if item and item not in result:
-                result.append(item)
+        for group in groups:
+            for item in SkillsLoader._coerce_tool_names(group):
+                if item and item not in result:
+                    result.append(item)
         return result
 
     def load_skills_for_context(self, skill_names: list[str]) -> str: