fix: address round-3 review findings and add staged issue 16

- Remove stale boost.skillsMarketplace.enabled from config.d.ts and
  runtime-config spec.md (consolidated into boost.features.skillsMarketplace)
- Use InputError instead of res.status(400) in skills deploy route
- Add InputError mapping to test error handler
- Fix task ID references in plugin.ts comment (section 8, not 5.x)
- Add issue 16 (skills route improvements) to staged-issues.md

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: gabemontero

workspaces/boost/openspec/changes/platform-operations-deployment/specs/runtime-config/spec.md

@@ -100,7 +100,6 @@ The following new features MUST have runtime configuration fields as specified b
   | Field | Scope | Description |
   |---|---|---|
   | `boost.skillsMarketplace.endpoint` | yaml-only | Skills catalog backend URL |
-  | `boost.skillsMarketplace.enabled` | db-overridable | Enable/disable skills marketplace |
 
 #### Scenario: Token exchange configuration
 

workspaces/boost/plugins/boost-backend/config.d.ts

@@ -93,12 +93,6 @@ export interface Config {
        * @configScope yaml-only
        */
       endpoint?: string;
-      /**
-       * Enable or disable skills marketplace.
-       * @visibility frontend
-       * @configScope db-overridable
-       */
-      enabled?: boolean;
     };
 
     /** Kagenti provider configuration. */

workspaces/boost/plugins/boost-backend/src/plugin.ts

@@ -320,7 +320,7 @@ export const boostPlugin = createBackendPlugin({
         });
         router.use(conversationRoutes);
 
-        // Skills marketplace proxy routes (issue 15 of 15, tasks 5.1/5.3/5.4)
+        // Skills marketplace proxy routes (section 8, tasks 8a/8b/8c)
         const skillsRoutes = createSkillsRoutes({
           permissions: _permissions,
           httpAuth,

workspaces/boost/plugins/boost-backend/src/skills/routes.test.ts

@@ -120,6 +120,7 @@ async function createTestApp(options?: {
   });
   app.use(router);
   const errorStatusMap: Record<string, number> = {
+    InputError: 400,
     NotAllowedError: 403,
     NotFoundError: 404,
   };

workspaces/boost/plugins/boost-backend/src/skills/routes.ts

@@ -26,7 +26,7 @@ import {
   boostAccessPermission,
   boostAdminPermission,
 } from '@red-hat-developer-hub/backstage-plugin-boost-common';
-import { NotAllowedError, NotFoundError } from '@backstage/errors';
+import { InputError, NotAllowedError, NotFoundError } from '@backstage/errors';
 
 /**
  * Options for creating skills marketplace routes.
@@ -265,10 +265,7 @@ export function createSkillsRoutes(options: SkillsRoutesOptions): Router {
           };
 
         if (!skillId || !ociImage) {
-          res.status(400).json({
-            error: 'skillId and ociImage are required',
-          });
-          return;
+          throw new InputError('skillId and ociImage are required');
         }
 
         const deploymentId = `skill-${skillId}-${Date.now()}`;