chore(catalog): remove llm-security and config-audit from the catalog

Both plugins move to the operator's private marketplace (decision
2026-10-06): their threat and Claude Code knowledge is out of date and
they will not be developed further in the open. Removed from the
manifest, the README and PUBLIC_REPOS in the same commit, as the
public-link gate requires. The catalog now lists 9 plugins.

check-public-links: 0 hits; check-versions, check-retired-refs,
check-nav-golden exit 0 before and after; 233 of 233 tests pass.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

.claude-plugin/marketplace.json

@@ -10,24 +10,6 @@
     "version": "1.0.0"
   },
   "plugins": [
-    {
-      "name": "llm-security",
-      "source": {
-        "source": "url",
-        "url": "https://git.fromaitochitta.com/open/llm-security.git",
-        "ref": "v8.1.3"
-      },
-      "description": "Security scanning, auditing, and threat modeling for Claude Code projects. OWASP LLM Top 10 (2025) and Agentic AI Top 10."
-    },
-    {
-      "name": "config-audit",
-      "source": {
-        "source": "url",
-        "url": "https://git.fromaitochitta.com/open/config-audit.git",
-        "ref": "v6.0.0"
-      },
-      "description": "Multi-agent workflow for analyzing, reporting, and optimizing Claude Code configuration across your entire machine"
-    },
     {
       "name": "voyage",
       "source": {