Fix customer Cowork plugin builds

[Mike-Medvedev]

Description

Customers cannot build the Cowork ZIP because it fetches a private MCP repository, and Windows line endings break its revision check. Build with Python and a hash-pinned public catalog artifact instead, bump the package to 1.0.1, and move detailed NAS results guidance into a linked companion so the latest training skill fits Cowork's 20,000-character limit.

Type of change

• Bug fix

How has this change been tested?

• Offline build, Windows line endings, ZIP/provenance checks, bad downloads and hashes, validation failures, and archive-write failures.
• Windows/Linux CI added.
• Real Cowork upload rejects an empty tool catalog despite toolkit validation passing; retain the 162-tool exported catalog.

Any specific deployment considerations

• Build with python3 cowork/build.py or Windows py -3 cowork/build.py; no private GitHub access or Node/uv required.
• Catalog distributed as a public release artifact; generated tool definitions are not checked into source.
• Customer authentication failure is investigated separately; packaging validation alone does not verify OAuth.