wf-web-update-deps 是做什么的?
Non-interactive dependency + agent-skill refresh across a fleet of web repos — update to latest under a pinned supply-chain release-age cutoff, re-lock, prune, audit, dedupe-dry-run, refresh vendored agent skills, then run each repo's quality suite. Flags skills that failed because they were renamed or removed upstream and reconciles them. Reports a per-repo table and a cross-fleet common-dependency drift matrix. Leaves changes uncommitted.