feat: gate unverified shortcuts for release

Hide shortcuts that did not pass real testing from public help/list discovery while keeping commands available for internal retest.

Record real shortcut inputs/outputs, backend issue summaries, next-release hidden list, and refresh skill guidance to mirror the lark-cli shortcut integration pattern.

internal/shortcut/shortcut_test.go

@@ -153,7 +153,7 @@ func TestCallMCPDataRejectsLikelyWriteUnderDryRun(t *testing.T) {
 	}
 
 	rt := &RuntimeContext{cmd: cmd, shortcut: Shortcut{Service: "chat"}}
-	_, err := rt.CallMCPData("chat", "send_personal_message", map[string]any{"receiverUserId": "u"})
+	_, err := rt.CallMCPData("chat", "send_personal_message", map[string]any{"receiverUid": "u"})
 	if err == nil {
 		t.Fatal("expected likely write guard error")
 	}