Module prereqs: sort Prerequisites lists numerically ascending (#102)

modules/22-securing-third-party-mcp-and-skills/README.md

@@ -8,20 +8,20 @@
 
 ## Prerequisites
 
+- **Module 2, Version Control as a Safety Net.** `git restore` and a clean commit are part of the
+  blast-radius story when something an agent did needs undoing.
+- **Module 15, Security Scanning for AI-Generated Code.** Module 15 scans the code the AI *writes*.
+  This module secures the AI *as an actor*. Same instinct (automated gates against AI-shaped
+  failure), different target. The hallucinated-package supply-chain risk from Module 15 has a direct
+  cousin here.
 - **Module 20, MCP Servers.** You've connected the AI to real tools and data over MCP. That
   connection is exactly the attack surface this module defends.
 - **Module 21, Skills.** You've installed and authored skills (and seen that a skill is just
   instructions plus, often, scripts the AI runs). A third-party skill is someone else's code and
   someone else's instructions.
-- **Module 15, Security Scanning for AI-Generated Code.** Module 15 scans the code the AI *writes*.
-  This module secures the AI *as an actor*. Same instinct (automated gates against AI-shaped
-  failure), different target. The hallucinated-package supply-chain risk from Module 15 has a direct
-  cousin here.
-- **Module 2, Version Control as a Safety Net.** `git restore` and a clean commit are part of the
-  blast-radius story when something an agent did needs undoing.
-- Helpful but not required: **Module 16** (containers, for sandboxing untrusted servers),
-  **Module 17** (secrets, for scoping the tokens you hand a server), and **Module 5** (committed
-  config; your MCP/skill setup is itself a reviewable, versioned artifact).
+- Helpful but not required: **Module 5** (committed config; your MCP/skill setup is itself a
+  reviewable, versioned artifact), **Module 16** (containers, for sandboxing untrusted servers), and
+  **Module 17** (secrets, for scoping the tokens you hand a server).
 
 ---