Security auditor, personas, orchestration, docs catalog & roadmap (#35)

Closes the remaining gaps vs alirezarezvani/claude-skills across trust, content
types, discoverability, and community.

Security (trust signal + useful):
- scripts/skill-audit.mjs scans skills/*/SKILL.md + each skill's scripts/ for
  prompt injection, exfiltration, dynamic code exec, destructive shell, secrets,
  and hidden text. HIGH fails CI (.github/workflows/skill-audit.yml) + a badge.
- New skill-security-auditor skill teaches the same review (production tier).

Content types:
- output-styles/ — 4 personas (Startup CTO, Growth Marketer, Solo Founder,
  Product Leader) as Claude Code output styles; --agent claude installs them too.
- ORCHESTRATION.md — Skill Chain / Multi-Agent Handoff / Domain Deep-Dive /
  Solo Sprint patterns.

Discoverability:
- scripts/build-docs.mjs generates a server-rendered, SEO-indexable
  web/catalog.html of all skills (built in the Pages deploy; gitignored).
  Linked from README + playground.

Community:
- ROADMAP.md (now/next/later + good-first-issues).

README badges/sections, TIERS (47 production), CHANGELOG, package.json files,
and exports/web index all updated. SkillCheck + security audit + exports verified.


Claude-Session: https://claude.ai/code/session_016JWn5jRD5tcEFKrubjQ6Px

Co-authored-by: Claude <noreply@anthropic.com>

skill-tiers.json

@@ -1,19 +1,63 @@
 {
   "_comment": "Machine-readable source for skill tiers. Keep in sync with TIERS.md. Any skill not listed here is 'stable'. Consumed by web/build-skills.mjs to tag skills.json.",
   "productionReady": [
-    "prd-template", "meeting-notes", "stakeholder-update", "user-research-synthesis", "competitive-analysis",
-    "rice-prioritisation", "feature-prioritisation", "okr-builder", "roadmap-narrative", "rice-impact-matrix",
-    "sprint-planning", "sprint-brief", "user-story-writer", "retro-analysis", "ab-test-planner", "product-launch-checklist", "technical-spec-template",
-    "customer-journey-map", "assumption-mapper", "user-interview-synthesis", "discovery-interview-guide", "job-story-mapper",
-    "data-analysis-standard", "retention-analysis", "cohort-analysis", "metrics-framework", "product-health-analysis",
-    "cs-health-scorecard", "churn-analysis", "qbr-deck", "renewal-playbook", "customer-success-plan", "cs-escalation-brief",
-    "code-review-checklist", "incident-postmortem", "architecture-decision-record", "api-docs-writer", "runbook-writer", "changelog-generator", "pr-description-writer", "technical-debt-register",
-    "go-to-market", "competitor-teardown", "product-positioning-doc",
-    "executive-summary", "press-release"
+    "prd-template",
+    "meeting-notes",
+    "stakeholder-update",
+    "user-research-synthesis",
+    "competitive-analysis",
+    "rice-prioritisation",
+    "feature-prioritisation",
+    "okr-builder",
+    "roadmap-narrative",
+    "rice-impact-matrix",
+    "sprint-planning",
+    "sprint-brief",
+    "user-story-writer",
+    "retro-analysis",
+    "ab-test-planner",
+    "product-launch-checklist",
+    "technical-spec-template",
+    "customer-journey-map",
+    "assumption-mapper",
+    "user-interview-synthesis",
+    "discovery-interview-guide",
+    "job-story-mapper",
+    "data-analysis-standard",
+    "retention-analysis",
+    "cohort-analysis",
+    "metrics-framework",
+    "product-health-analysis",
+    "cs-health-scorecard",
+    "churn-analysis",
+    "qbr-deck",
+    "renewal-playbook",
+    "customer-success-plan",
+    "cs-escalation-brief",
+    "code-review-checklist",
+    "incident-postmortem",
+    "architecture-decision-record",
+    "api-docs-writer",
+    "runbook-writer",
+    "changelog-generator",
+    "pr-description-writer",
+    "technical-debt-register",
+    "go-to-market",
+    "competitor-teardown",
+    "product-positioning-doc",
+    "executive-summary",
+    "press-release",
+    "skill-security-auditor"
   ],
   "experimental": [
-    "instagram-post-downloader", "substack-notes-scraper", "thumbnail-creator", "notebooklm-connector",
-    "email-triage", "morning-intelligence", "last-30-days-research", "competitor-signal-tracker",
+    "instagram-post-downloader",
+    "substack-notes-scraper",
+    "thumbnail-creator",
+    "notebooklm-connector",
+    "email-triage",
+    "morning-intelligence",
+    "last-30-days-research",
+    "competitor-signal-tracker",
     "multi-source-signal-synthesiser"
   ]
 }