fix(qa-sec): remove orphan agent entries from plugin.json

[etannous]

Summary

categories/04-quality-security/.claude-plugin/plugin.json (v1.1.0) lists two agent files that don't exist in the repository:

• ./cost-accounting-performance-reviewer.md
• ./performance-roi-translator.md

As a result, installing voltagent-qa-sec@voltagent-subagents via the Claude Code plugin marketplace fails with:

Status: ✘ failed to load
Error: Path not found: <cache>/voltagent-qa-sec/1.1.0/cost-accounting-performance-reviewer.md (agents)
Error: Path not found: <cache>/voltagent-qa-sec/1.1.0/performance-roi-translator.md (agents)

This blocks the entire plugin from loading — none of the 16 valid agents (security-auditor, penetration-tester, code-reviewer, qa-expert, etc.) become available.

Fix

Remove the two orphan entries from the agents array. The 16 remaining agents all exist on disk and load correctly.

If cost-accounting-performance-reviewer and performance-roi-translator are intended to ship in v1.1.0, the corresponding .md files need to be added in a follow-up commit and the entries restored.

Verification

Reproduced locally on Claude Code v2.x (Windows). After applying this fix to the local cache (~/.claude/plugins/cache/voltagent-subagents/voltagent-qa-sec/1.1.0/.claude-plugin/plugin.json), the plugin loads cleanly:

voltagent-qa-sec@voltagent-subagents
  Version: 1.1.0
  Scope: user
  Status: ✔ enabled

Test plan

• claude plugin list shows voltagent-qa-sec as ✔ enabled (was ✘ failed to load)
• All 16 remaining agents load and are invokable
• CI / marketplace validation passes

[DND202021]

Gentle ping @necatiozmen — this is a trivial 2-line fix (no conflicts, no CI to run) that unblocks all 16 working agents in the voltagent-qa-sec pack. Bug also tracked in #240 and #242, still reproducing on main today. Would be great to land when you have a free moment. Thanks!