Security auditor, personas, orchestration, docs catalog & roadmap (#35)

Closes the remaining gaps vs alirezarezvani/claude-skills across trust, content
types, discoverability, and community.

Security (trust signal + useful):
- scripts/skill-audit.mjs scans skills/*/SKILL.md + each skill's scripts/ for
  prompt injection, exfiltration, dynamic code exec, destructive shell, secrets,
  and hidden text. HIGH fails CI (.github/workflows/skill-audit.yml) + a badge.
- New skill-security-auditor skill teaches the same review (production tier).

Content types:
- output-styles/ — 4 personas (Startup CTO, Growth Marketer, Solo Founder,
  Product Leader) as Claude Code output styles; --agent claude installs them too.
- ORCHESTRATION.md — Skill Chain / Multi-Agent Handoff / Domain Deep-Dive /
  Solo Sprint patterns.

Discoverability:
- scripts/build-docs.mjs generates a server-rendered, SEO-indexable
  web/catalog.html of all skills (built in the Pages deploy; gitignored).
  Linked from README + playground.

Community:
- ROADMAP.md (now/next/later + good-first-issues).

README badges/sections, TIERS (47 production), CHANGELOG, package.json files,
and exports/web index all updated. SkillCheck + security audit + exports verified.


Claude-Session: https://claude.ai/code/session_016JWn5jRD5tcEFKrubjQ6Px

Co-authored-by: Claude <noreply@anthropic.com>

CHANGELOG.md

@@ -9,7 +9,23 @@ each new wave of skills bumps the **major** version, extensions and fixes bump
 
 ## [Unreleased]
 
-_Nothing yet._
+### Added
+- **Skill Security Auditor** — `scripts/skill-audit.mjs` scans installable content
+  (`skills/*/SKILL.md` + each skill's `scripts/`) for prompt injection, data
+  exfiltration, dynamic code execution, destructive shell, hardcoded secrets, and hidden
+  text. HIGH findings fail CI (`skill-audit.yml`); a `security audit` badge in the README.
+  Plus a new **`skill-security-auditor`** skill that teaches the same review for any skill.
+- **Personas (output-styles)** — 4 Claude Code output styles in [`output-styles/`](output-styles/)
+  (Startup CTO, Growth Marketer, Solo Founder, Product Leader). `--agent claude` now also
+  installs `~/.claude/output-styles/`.
+- **Orchestration guide** — [`ORCHESTRATION.md`](ORCHESTRATION.md): Skill Chain,
+  Multi-Agent Handoff, Domain Deep-Dive, and Solo Sprint patterns for combining skills,
+  subagents, and commands.
+- **Static skill catalog** — `scripts/build-docs.mjs` generates a server-rendered,
+  SEO-indexable `web/catalog.html` of all skills (linked from the README and Playground;
+  built in the Pages deploy).
+- **Public roadmap** — [`ROADMAP.md`](ROADMAP.md) with now/next/later and a "good first
+  issues" list to grow contributors.
 
 ## [18.0.0] — Windsurf, Aider & an MCP Server — 2026-06-17