docs(plan): revise the higgsfield plan and spec after the three-lens challenge

docs/superpowers/plans/2026-09-30-higgsfield-pack.patches/07-readme.patch

@@ -1,6 +1,6 @@
 --- a/README.md
 +++ b/README.md
-@@ -348,6 +348,46 @@
+@@ -348,6 +348,55 @@
  auto-approving with no prompt raised (LRN-153), so an `ask` entry would have
  declared an intent without gating anything.
  
@@ -16,24 +16,29 @@
 +```
 +
 +`make plugin` does both (Step 8.6 installs the CLI, then offers the login in
-+an interactive terminal) and clones the eight skills of
++an interactive terminal) and clones the skills of
 +[higgsfield-ai/skills](https://github.com/higgsfield-ai/skills) into
 +`skills-external/higgsfield-*`. `make update` refreshes the CLI and the
 +skills, and `make doctor` reports the CLI and its session. The copies are
 +machine-owned and gitignored. They follow upstream `main`, so a prompt
-+change arrives with no diff to review.
++change arrives with no diff to review, and a skill that upstream removes
++keeps its last local copy.
 +
 +The pack is off by default and belongs to no profile. It costs nothing until
 +you ask for it, and no `profile set` touches it:
 +
 +```bash
-+bash lib/toggle-external.sh enable higgsfield            # 7 media skills
++bash lib/toggle-external.sh enable higgsfield            # media skills
 +bash lib/toggle-external.sh enable higgsfield-websites   # landing-page aid
 +bash lib/toggle-external.sh disable higgsfield
 +```
 +
-+`higgsfield` turns on generate, soul-id, product-photoshoot, brandkit,
-+marketplace-cards, video-explainer and youtube-thumbnail.
++`higgsfield` links a fixed list of seven media skills: generate, soul-id,
++product-photoshoot, brandkit, marketplace-cards, video-explainer and
++youtube-thumbnail. The list is `HIGGSFIELD_MEDIA_SKILLS` in
++`lib/toggle-external.sh`. A skill that upstream adds later is synced and
++reported, and stays unlinked until it is added there.
++
 +`higgsfield-websites` is kept apart. Here it helps with landing pages inside
 +the design stack (assets, references), and `higgsfield website
 +create|deploy|publish` stays unused. Claude enables either toggle itself on
@@ -41,8 +46,12 @@
 +with `higgsfield generate cost` before a paid run.
 +
 +The skills are cloned, not installed with `npx skills add`: that installer
-+links all eight skills into `~/.claude/skills` on every refresh, which would
-+undo the off-by-default state.
++links every skill into `~/.claude/skills` on each refresh, which would undo
++the off-by-default state.
++
++The package ships its binary through a postinstall script. If npm holds that
++script back, `higgsfield` exists on PATH and fails at once; reinstall with
++`npm install -g --allow-scripts=@higgsfield/cli @higgsfield/cli`.
 +
  ---