fix(deps): drop hard marketplace pin on web-design dep

[lx-0]

Summary

• Drops the marketplace: "ystacks" qualifier on the web-design dependency in .claude-plugin/plugin.json so the resolver can fall back to whichever marketplace ytstack itself was installed from.
• Bumps 0.1.2 -> 0.1.3 in plugin.json and marketplace.json so /plugin update actually picks up the change.
• yesterday-brand keeps its qualifier -- it has no cross-listing in ystacks and stays ystacks-internal-only.

Why

Reported by user: /doctor errors on a fresh install of ytstack-internal@ystacks-internal -- the bundle pulls in ytstack (cross-listed in ystacks-internal), but ytstack's own plugin.json hard-pins web-design@ystacks. Even though web-design is cross-listed in ystacks-internal too, the explicit marketplace qualifier blocks fallback. Result: web-design unresolvable -> ytstack disabled -> ytstack-internal disabled. The user's expected flow is "install ytstack-internal, get everything", without manually adding the public ystacks marketplace.

Test plan

• /plugin update ytstack-internal@ystacks-internal after merge
• /doctor reports no plugin errors for ytstack or ytstack-internal
• Public path: claude plugin install ytstack@ystacks in a clean profile -> web-design resolved from ystacks
• Internal path: claude plugin install ytstack-internal@ystacks-internal in a clean profile (no ystacks added) -> web-design resolved from ystacks-internal cross-listing
• If either path fails, fall back to Option B (drop the dep entirely, declare it on bundle plugins instead) and add a DECISIONS.md entry

Notes for reviewer

• This relies on an undocumented Claude Code resolver behavior (no-qualifier dep -> "current marketplace" fallback). If the test plan fails, revert and switch to Option B.
• DECISIONS.md entry intentionally deferred until the test plan confirms the pattern works.

🤖 Generated with Claude Code

---

Note

Low Risk
Low risk metadata-only change: relaxes dependency resolution for web-design and bumps plugin version, with no runtime code changes. Main risk is unexpected resolver behavior across marketplaces causing install/update resolution differences.

Overview
Removes the explicit marketplace: "ystacks" qualifier from the web-design dependency in .claude-plugin/plugin.json, allowing dependency resolution to follow the marketplace ytstack was installed from.

Bumps the plugin version from 0.1.2 to 0.1.3 in both .claude-plugin/plugin.json and .claude-plugin/marketplace.json so updates pick up the dependency metadata change.

^{Reviewed by Cursor Bugbot for commit 0e673c8. Bugbot is set up for automated code reviews on this repo. Configure here.}