fix(custom-node-list): demote mickmumpitz/ComfyUI-SplatKit from default to dev channel (security hold)

Post-registration full re-verify (§14.7) found an unauthenticated CSRF-reachable
arbitrary-directory delete: DatasetProject.make(reset=True) runs shutil.rmtree on an
uncontained os.path.join(output_dir, dataset_name) (nodes/common.py:169-173) — an
absolute or ..-containing name escapes the output dir. Removed from default + node_db/new,
added to node_db/dev with [SECURITY ISSUE] suffix (reversible install-block, §4.7-H mechanic).
Restore to default on author fix (realpath+commonpath containment) + re-verify pass.

custom-node-list.json

@@ -60971,17 +60971,6 @@
             "install_type": "git-clone",
             "description": "OpenAI API based prompt rewriting agents for MiniMax H3 T2VA/I2VA/L2VA/FL2VA and Ref2VA workflows, using the official H3 skill files."
         },
-        {
-            "author": "mickmumpitz",
-            "title": "ComfyUI-SplatKit",
-            "id": "splatkit",
-            "reference": "https://github.com/mickmumpitz/ComfyUI-SplatKit",
-            "files": [
-                "https://github.com/mickmumpitz/ComfyUI-SplatKit"
-            ],
-            "install_type": "git-clone",
-            "description": "Build 3D Gaussian Splat training datasets from a single 360 panorama, inside ComfyUI."
-        },
         {
             "author": "Andy294753951",
             "title": "ComfyUI-Flow-Wrangler",

node_db/dev/custom-node-list.json

@@ -1,5 +1,16 @@
 {
     "custom_nodes": [
+        {
+            "author": "mickmumpitz",
+            "title": "ComfyUI-SplatKit [SECURITY ISSUE]",
+            "id": "splatkit",
+            "reference": "https://github.com/mickmumpitz/ComfyUI-SplatKit",
+            "files": [
+                "https://github.com/mickmumpitz/ComfyUI-SplatKit"
+            ],
+            "install_type": "git-clone",
+            "description": "Build 3D Gaussian Splat training datasets from a single 360 panorama, inside ComfyUI."
+        },
         {
             "author": "yitao2020",
             "title": "ComfyUI-GPT-Image-2 [NAME CONFLICT]",

node_db/new/custom-node-list.json

@@ -222,17 +222,6 @@
             "install_type": "git-clone",
             "description": "A ComfyUI custom node pack for image captioning and text generation with ToriiGate-0.5, a fine-tuned Qwen3.5-4B model."
         },
-        {
-            "author": "mickmumpitz",
-            "title": "ComfyUI-SplatKit",
-            "id": "splatkit",
-            "reference": "https://github.com/mickmumpitz/ComfyUI-SplatKit",
-            "files": [
-                "https://github.com/mickmumpitz/ComfyUI-SplatKit"
-            ],
-            "install_type": "git-clone",
-            "description": "Build 3D Gaussian Splat training datasets from a single 360 panorama, inside ComfyUI."
-        },
         {
             "author": "Andy294753951",
             "title": "ComfyUI-Flow-Wrangler",