fix: use canonical Terraphim collateral links

[AlexMikhalev]

Outcome

• makes Terraphim-owned websites the only external links in end-user marketplace collateral
• publishes the canonical UK privacy URL at https://terraphim-skills.md/legal/privacy/
• keeps GitHub only as machine-readable source/provenance where marketplace protocols require it
• advances the pack to v0.2.3 and the three Community skills to v1.0.2
• regenerates and re-signs all skill manifests and deterministic AutoClaw archives

Verification

• python3 -m unittest discover -s tests -p 'test_*.py' — 26 passed
• tsm validate — PASS for all three signed Community skills
• python3 scripts/generate_distribution.py --check — PASS
• ruff check . and ruff format --check . — PASS
• actionlint — PASS
• claude plugin validate . --strict — PASS
• git diff --check — PASS
• canonical homepage, installation, MCP, privacy, terms, and article URLs — HTTP 200

Regression guards

• end-user collateral may link externally only to terraphim-skills.md or terraphim.ai
• both language READMEs must publish /legal/privacy/ and /legal/terms/
• the invalid /privacy/ path is explicitly rejected