Dual-publish Open Plugins 1.0.0 and list for Grok Bot

[jesseoue]

Summary

• Dual-publish Agent Plugins 1.0.0 (plugin.json + $schema on mcp.json) beside .cursor-plugin/ so cursor.directory Auto GitHub scan can detect skills/MCP without breaking Cursor Plugin CI.
• mcp.json and .mcp.json are byte-identical OAuth HTTP: streamable-http to https://mcp.leadmagic.io/mcp, no keys, no extra servers.
• Grok Bot Plugins is the same Cursor Marketplace listing: minClientVersions.grokbot 0.49.0, same first-run OAuth, no second login page.

Type Of Change

• Documentation
• Skills or rules
• MCP config or metadata
• Validation or GitHub automation

Validation

• Ran npm test && npm run validate
• Checked that copy matches the current hosted MCP surface
• Verified no secrets or hardcoded API keys were added (no .env with real keys; see SECURITY.md)

Alignment Checklist

• mcp.json still points to https://mcp.leadmagic.io/mcp
• Default mcp.json stays OAuth-only (no headers; no API keys)
• New or edited agents/*.md and commands/*.md include YAML frontmatter (name, description)
• Repo copy does not imply MCP support for tools outside the current MCP surface
• README and submission copy stay consistent

Test plan

• Confirm CI validate + public-files pass
• After merge to main, submit https://github.com/LeadMagic/leadmagic-cursor-plugin at https://cursor.directory/plugins/new Auto GitHub
• Confirm auto-detect of root plugin.json, mcp.json, skills, rules, agents
• Cursor local link still loads this checkout (npm run install:local)

Notes For Reviewers

Directory Auto scan reads GitHub main. Merge this PR before expecting a successful catalog detect of the new root manifest.