test(config-audit): add marketplace-small/medium/large scanner fixtures

plugins/config-audit/tests/fixtures/marketplace-medium/.claude/settings.json

@@ -0,0 +1,8 @@
+{
+  "$schema": "https://json.schemastore.org/claude-code-settings.json",
+  "permissions": {
+    "allow": ["Bash(npm run *)", "Read(src/**)"],
+    "deny": ["Read(./.env)"]
+  },
+  "effortLevel": "medium"
+}

plugins/config-audit/tests/fixtures/marketplace-medium/.claude/shared.md

@@ -0,0 +1,13 @@
+# Shared Medium Patterns
+
+Naming conventions and common helpers shared across the four plugins.
+
+## Naming
+
+- `camelCase` for variables and functions
+- `PascalCase` for classes and types
+
+## Error Handling
+
+- Early returns over nested conditionals
+- Typed error subclasses

plugins/config-audit/tests/fixtures/marketplace-medium/.mcp.json

@@ -0,0 +1,10 @@
+{
+  "mcpServers": {
+    "memory": {
+      "type": "stdio",
+      "command": "npx",
+      "args": ["-y", "@modelcontextprotocol/server-memory"],
+      "trust": "workspace"
+    }
+  }
+}

plugins/config-audit/tests/fixtures/marketplace-medium/CLAUDE.md

@@ -0,0 +1,24 @@
+# Marketplace Medium
+
+Marketplace with 3–4 plugins, modest hooks.json, single MCP server, and
+one @import to a shared configuration file.
+
+## Plugins
+
+- plugin-alpha — linting
+- plugin-beta — formatting
+- plugin-gamma — test runner
+- plugin-delta — release automation
+
+## Commands
+
+- `npm run build`
+- `npm test`
+- `npm run lint`
+- `npm run format`
+
+## Conventions
+
+Standard TypeScript project layout. Shared patterns imported below.
+
+@.claude/shared.md

plugins/config-audit/tests/fixtures/marketplace-medium/hooks/hooks.json

@@ -0,0 +1,10 @@
+{
+  "hooks": {
+    "PreToolUse": [
+      { "matcher": "Bash", "hooks": [{ "type": "command", "command": "echo pre", "timeout": 5000 }] }
+    ],
+    "PostToolUse": [
+      { "matcher": "Write", "hooks": [{ "type": "command", "command": "echo post", "timeout": 5000 }] }
+    ]
+  }
+}