Update Skill for current BeatAPI capabilities

[erickkkyt]

Summary

• sync the current 30-operation BeatAPI OpenAPI contract
• add text, image, video, Effect, and Video Analysis guidance
• document host Configure-based API key setup
• require trusted upload roots and explicit trust for custom API origins
• keep secret-producing Realtime and webhook creation in trusted server-side code
• document the reviewed absolute CLI bridge path
• expand eval and validation coverage

Verification

• npm run verify
• npm audit: 0 vulnerabilities