[patch] chore: sync skills to v0.31.1

[jfrog-agentic-release-bot]

skills v0.31.1

Vendored from v0.31.1 of jfrog/jfrog-skills
(source tag jfrog-skills/v0.31.1 on GHES).

What changed

• Package curation skill: do not use it to install, list, or approve MCP servers/tools (including package-like names such as @scope/pkg) — that is jfrog-mcp-management (#139)

Source

• GHE release: https://github.jfrog.info/JFROG/jfrog-skills/releases/tag/jfrog-skills/v0.31.1
• Public tag: https://github.com/jfrog/jfrog-skills/releases/tag/v0.31.1
• Sync branch: chore/sync-skills-v0.31.1

[davida-jfrog]

missing bump of the sync-modules-vendor.json

[sverdlov93]

@davida-jfrog This PR is skills-only (jfrog-skills v0.31.1). It does not touch hooks/modules.

.github/scripts/sync-modules-vendor.json pins agent-hooks (plugin/modules/), not skills. That pin is already jfrog-agent-hooks/v0.11.1 from #59 / plugin v1.0.20.

Previous skills syncs on this repo (#58, #53, #52) also left that file unchanged. No bump needed here.

[davida-jfrog]

@sverdlov93 You are right. Seems like we are missing the skill vendor json.