fix: address 5 critical and major PR review issues

- Remove set -e from validate-marketplace.sh to prevent early exit on
  check failures, allowing the summary to always be displayed (PRRT_kwDOO6Hdxs5uvKrc)
- Fix marketplace.json source path to point to skills/unraid instead of
  ./ for correct plugin directory resolution (PRRT_kwDOO6Hdxs5uvKrg)
- Fix misleading trap registration comment in unraid-api-crawl.md and
  add auth note to Apollo Studio URL (PRRT_kwDOO6Hdxs5uvO2t)
- Extract duplicated cleanup-with-error-handling in main.py into
  _run_shutdown_cleanup() helper (PRRT_kwDOO6Hdxs5uvO3A)
- Add input validation to read-logs.sh to prevent GraphQL injection
  via LOG_NAME and LINES parameters (PRRT_kwDOO6Hdxs5uvKrj)

unraid_mcp/tools/health.py

@@ -204,6 +204,8 @@ async def _comprehensive_check() -> dict[str, Any]:
         return health_info
 
     except Exception as e:
+        # Intentionally broad: health checks must always return a result,
+        # even on unexpected failures, so callers never get an unhandled exception.
         logger.error(f"Health check failed: {e}")
         return {
             "status": "unhealthy",
@@ -222,6 +224,9 @@ async def _diagnose_subscriptions() -> dict[str, Any]:
         await ensure_subscriptions_started()
 
         status = subscription_manager.get_subscription_status()
+        # This list is intentionally placed into the summary dict below and then
+        # appended to in the loop — the mutable alias ensures both references
+        # reflect the same data without a second pass.
         connection_issues: list[dict[str, Any]] = []
 
         diagnostic_info: dict[str, Any] = {