claude.ai marketplace sync separates hosted, browse-only, and policy-blocked entries

Marketplace sync/cache logic for claude.ai-sourced marketplaces now classifies entries into three buckets instead of a single browse-only list: ones the org has actually installed (hosted), ones visible only for browsing, and ones blocked by policy. Each entry's scope is re-derived on every sync, with a warning logged if that re-derivation fails, and a new info log is emitted when browse-only marketplaces are present.