Release v2.9.0 — supply-chain-defense skill + settings.local.json
secret-safety. Description already reflected the v2.9.0 inventory
(79 skills / 7 rules / 7 hooks); this lands the version number to match
the tag.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>