[iiwish]

Summary

• bump Desktop source versions to 0.1.0-alpha.6
• update README and Desktop release notes to require SkillRun Core v0.6.8+
• describe the alpha.6 focus: first-run demo entry, local hero catalog smoke, and remote catalog URL read-only inspect/status/plan

Validation

• npm run version:desktop:check
• npm test -- --run
• npm run build
• cd src-tauri && cargo check
• node --check scripts/hero-desktop-smoke.mjs
• git diff --check
• PATH=/Users/iiwish/self/skillrun/target/debug:$PATH SKILLRUN_EXPECTED_VERSION=0.6.8 npm run smoke:real-core
• SKILLRUN_CLI=/Users/iiwish/self/skillrun/target/debug/skillrun npm run smoke:hero-desktop

Release intent

This prepares desktop-v0.1.0-alpha.6 as a prerelease after Core v0.6.8 shipped. The release workflow must run with Core v0.6.8 and pass real Core smoke, Tauri build matrix, and asset guard before publishing.

Boundaries

• prerelease alpha, not stable/latest
• macOS/Windows/Linux packages remain unsigned; macOS is not notarized
• Desktop still does not bundle or install SkillRun Core CLI, Python, Node, npm, pip packages, or action dependencies
• remote catalog URLs remain read-only in Desktop; URL sources are not applied or downloaded by Desktop