Add Tencent CloudBase plugin

[binggg]

What this PR does

Adds the official Tencent CloudBase plugin to the Grok Build marketplace catalog: AI models, auth, databases, cloud functions, storage, CloudRun, and WeChat Mini Program workflows via MCP (cloudbase-mcp) plus skills, commands, agents, and hooks.

• Plugin name: cloudbase
• Type: remote source
• Source URL + pinned SHA: https://github.com/TencentCloudBase/cloudbase-plugin.git @ b615a7f8bfad6637f2297e1a993d29f6a292a13d
• Homepage: https://docs.cloudbase.net/ai/cloudbase-ai-toolkit/ai-agent-plugins
• Category: development
• Keywords: cloudbase, tencent cloudbase, cloudbase mcp, tencent cloud
• Domains: cloudbase.net, tcb.cloud.tencent.com

Ownership

• I own this plugin or have the right to distribute it.
• The source repo is published under our official org (TencentCloudBase, matching the CloudBase brand).

Checklist

• Added/updated exactly one entry in .grok-plugin/marketplace.json (valid JSON, kebab-case name).
• Remote source pins a full 40-char lowercase commit sha, and that commit is public + reachable.
• Regenerated .grok-plugin/plugin-index.json (python3 scripts/generate-plugin-index.py).
• python3 scripts/validate-catalog.py passes locally.
• python3 scripts/generate-plugin-index.py --check passes locally.
• homepage + clear description set; local plugins include README.md + .grok-plugin/plugin.json.
• License is stated (MIT — see upstream plugin manifest / repo).

Security

• No curl | bash, remote-code download/exec, or postinstall RCE.
• No reading/exfiltration of secrets, tokens, .env, or env vars.
• Hooks and MCP scope are least-privilege — ships one MCP server via npx @cloudbase/cloudbase-mcp@latest (stdio), plus skills/commands/agents/hooks scoped to CloudBase development workflows.
• Network endpoints this plugin calls (and why): Tencent CloudBase / Tencent Cloud APIs (cloudbase.net, tcb.cloud.tencent.com, related Tencent Cloud endpoints) for env management, databases, functions, storage, CloudRun, auth, and AI model access after the user authenticates.
• Credentials/permissions it requires (and why): CloudBase login / Tencent Cloud credentials provided by the user through the MCP auth flow; no hardcoded secrets in the plugin package.

Notes for reviewers

• Official org source: https://github.com/TencentCloudBase/cloudbase-plugin (not a personal fork).
• Please Approve and run workflows so Validate catalog can run (currently action_required for first-time fork contributor).
• Local validation already run:

  python3 scripts/validate-catalog.py
  python3 scripts/generate-plugin-index.py
  python3 scripts/generate-plugin-index.py --check

[binggg]

Updated pinned SHA to b615a7f8bfad6637f2297e1a993d29f6a292a13d (current cloudbase-plugin main after skill directory / orphan-ref fixes for Awesome Copilot vally gates). Regenerated plugin-index.json via scripts/generate-plugin-index.py.

[binggg]

Hi @ykeremy / @xai-org/grok-build-team — could you please Approve and run workflows for this PR?

The Validate catalog check is stuck on action_required (first-time contributor from a fork). Once that runs green, we'd appreciate a review when you have a chance.

Thanks!

[binggg]

Conflict with upstream main resolved — merged latest main into the branch and regenerated plugin-index.json. All CI checks are green; the PR is mergeable and ready for review. Thanks!