Adds the ComOS Federation connector to the catalogue: a thin read-only client for the ComOS commerce network's public surfaces (12 methods, each proxying one tokenless tool on the federation gateway over HTTPS).

Per catalogue/README.md:

• catalogue.json entry (v2): per-platform bundles map for linux/amd64, linux/arm64, darwin/amd64, darwin/arm64, with linux/amd64 as the back-compat primary; metadata_url + metadata_sha256 pin the detail doc added in the same commit.
• apps/com.comos-federation.connector/metadata.json: detail doc with methods, changelog, vendor, compat.
• Bundles are GitHub release assets (https://github.com/ronrey/comos-pilot-connector/releases/tag/v0.1.0); each bundle's manifest is sha-pinned and publisher-signed (ed25519:IB9iTy70SyMHnQjG1rMtOoXf3KIE3uDZpElGpBw5fUw=). The manifest's only network grant is net.dial to mcp.comos-federation.com, rate-limited 120/min. No fs.* grants; the connector holds no credentials and performs no writes.
• Source (AGPL-3.0-or-later): https://github.com/ronrey/comos-pilot-connector — includes a container integration test that installs the bundle through the signed-catalogue path with a staging catalogue and round-trips comos.help against the live gateway via pilotctl appstore call.

catalogue.json.sig is not updated here — the catalogue signing key lives with your release pipeline, so this needs a re-sign at merge.

Happy to adjust the entry, id, categories, or listing copy to fit house conventions.