chore(config): security-guidance Stop review off, plugins off, routing and docs

settings.json: ENABLE_STOP_REVIEW=0 (the plugin's own switch: no more
Opus call on every turn that changes code, 0 findings in 6 days, 1
recorded false positive; the regex layer and the commit/push agentic
review stay on), brightdata-plugin@synced false (keyless-useless, its MCP
skill would hijack WebFetch/WebSearch), frontend-design official plugin
entry gone (uninstalled: byte-identical to the managed copy).

CLAUDE.global.md routes Ship/PR to ship-feature (gstack ship takes
origin/HEAD = main as base), drops ship/context-save from the gstack-off
list and 21st-ui-review from the design review line (trio is max-only).
deploy's table no longer points at land-and-deploy/setup-deploy.
plugin-advisor.md describes security-guidance's real mechanics. CHANGELOG
Unreleased entry with a Known residual section.

settings.json

@@ -5,6 +5,9 @@
     "pr": "",
     "sessionUrl": false
   },
+  "env": {
+    "ENABLE_STOP_REVIEW": "0"
+  },
   "permissions": {
     "allow": [
       "Bash(git status)",
@@ -419,7 +422,7 @@
     "security-guidance@claude-code-plugins": true,
     "superpowers@superpowers-marketplace": true,
     "pr-review-toolkit@claude-code-plugins": false,
-    "frontend-design@claude-plugins-official": true
+    "brightdata-plugin@synced": false
   },
   "extraKnownMarketplaces": {
     "claude-code-plugins": {
@@ -447,6 +450,7 @@
       }
     }
   },
+  "feedbackDrafts": "off",
   "effortLevel": "xhigh",
   "remoteControlAtStartup": true,
   "inputNeededNotifEnabled": true,
@@ -499,6 +503,5 @@
       "**Sensitive remote targets**: any namespace, host, database or container whose name carries `prod` or `production` as a whole word or name segment.",
       "**Sensitive data locations & audiences**: per-project `.env` files (gitignored) hold database, deploy and API credentials; some web projects store customer-submitted form data under a retention policy. Both are personal or client data — never send either to an external service."
     ]
-  },
-  "feedbackDrafts": "off"
+  }
 }