Refresh security review scope and conditions

[shinpr]

Summary

• semi-annual security review of the detection patterns: drop stale entries, narrow over-broad ones, and cover SSRF, object-level authorization, and dependency and pipeline integrity
• gate the advisory step on the changed component instead of searching the whole technology stack every run
• resolve the re-review JSON contract contradiction and the unconditional blocked status on committed secrets
• sync generated plugin bundles and bump the patch version to 0.27.2

Validation

• pnpm sync:check
• claude plugin validate .claude-plugin/marketplace.json
• claude plugin validate dev-workflows
• claude plugin validate dev-workflows-frontend
• claude plugin validate dev-workflows-fullstack
• claude plugin validate dev-skills
• git diff --check

🤖 Generated with Claude Code