feat(ultraplan-local): v1.6.0 — /ultraresearch-local deep research command

Add /ultraresearch-local for structured research combining local codebase
analysis with external knowledge via parallel agent swarms. Produces research
briefs with triangulation, confidence ratings, and source quality assessment.

New command: /ultraresearch-local with modes --quick, --local, --external, --fg.
New agents: research-orchestrator (opus), docs-researcher, community-researcher,
security-researcher, contrarian-researcher, gemini-bridge (all sonnet).
New template: research-brief-template.md.

Integration: --research flag in /ultraplan-local accepts pre-built research
briefs (up to 3), enriches the interview and exploration phases. Planning
orchestrator cross-references brief findings during synthesis.

Design principle: Context Engineering — right information to right agent at
right time. Research briefs are structured artifacts in the pipeline:
ultraresearch → brief → ultraplan --research → plan → ultraexecute.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

SECURITY.md

@@ -0,0 +1,28 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+If you discover a security vulnerability in this plugin, please report it responsibly.
+
+**Do NOT open a public issue for security vulnerabilities.**
+
+Instead, please email the maintainer directly or use GitHub's private vulnerability reporting feature.
+
+## Security Considerations
+
+This plugin:
+
+- Does not store credentials or API keys
+- Does not make external network requests (except when using WebFetch for URL processing)
+- Does not execute arbitrary code
+- Stores all data locally in markdown files
+
+## User Data
+
+- The `config/user-profile.local.md` file contains personal preferences
+- This file is gitignored by default to prevent accidental commits
+- Review your `.gitignore` before pushing to ensure no personal data is committed
+
+## Dependencies
+
+This plugin has no external dependencies beyond Claude Code itself.