- Change deduplication key from slug to {repo_id}+{blob_hash} - Keep latest version by commit_sha when duplicates found - Use git2 to open repos and get correct workdir and commit_sha - Fix case-insensitive SKILL.md detection in scanner