fix(FN-1966): use public skills search fallback for catalog fetches

- Route unauthenticated catalog requests to skills.sh /api/search with wildcard query support and normalized response mapping
- Keep authenticated v1 catalog fetch, but fall back to public search on 401/403 while preserving auth metadata
- Expand skills route tests for unauthenticated payload shape, query passthrough, and no-query wildcard behavior
- Stabilize onboarding reopen tests by awaiting Authentication section render before interaction
- Document dashboard dist build prerequisite for CLI test troubleshooting

packages/dashboard/app/components/__tests__/App.test.tsx

@@ -2192,7 +2192,8 @@ describe("App onboarding reopen", () => {
     });
 
     // Navigate to Authentication section (it should be default or click to ensure)
-    const authSection = screen.getAllByText("Authentication")[0];
+    const authSections = await screen.findAllByText("Authentication");
+    const authSection = authSections[0];
     fireEvent.click(authSection);
 
     await waitFor(() => {
@@ -2254,7 +2255,11 @@ describe("App onboarding reopen", () => {
       expect(screen.getByText("Settings")).toBeTruthy();
     });
 
-    // Authentication is the default settings section; wait for it to hydrate.
+    // Navigate to Authentication section
+    const authSections = await screen.findAllByText("Authentication");
+    const authSection = authSections[0];
+    fireEvent.click(authSection);
+
     await waitFor(() => {
       expect(fetchAuthStatus).toHaveBeenCalled();
     });