docs: update README for 3 new skills (java-clean-arch, java-security, java-openapi)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: ducpm2303

README.md

@@ -6,8 +6,8 @@ A Claude Code plugin marketplace with 3 focused plugins for Java developers. All
 
 | Plugin | Skills | Commands | Agents | Install when |
 |---|---|---|---|---|
-| `java-core` | 13 | 2 | `java-architect`, `java-build-resolver` | Every Java project |
-| `java-spring` | 4 | 2 | `java-spring-expert` | Spring Boot projects |
+| `java-core` | 14 | 2 | `java-architect`, `java-build-resolver` | Every Java project |
+| `java-spring` | 6 | 2 | `java-spring-expert` | Spring Boot projects |
 | `java-quality` | 3 | 1 | `java-security-reviewer`, `java-performance-reviewer`, `java-test-engineer` | Quality enforcement |
 
 ## Quick Setup (5 minutes)
@@ -63,6 +63,7 @@ Skills activate automatically based on context, or invoke them explicitly.
 | `/java-core:java-solid` | Check all 5 SOLID principles with Java-specific patterns |
 | `/java-core:java-design-pattern` | Detect GoF patterns in code or recommend a pattern for a problem |
 | `/java-core:java-adr` | Create, list, and manage Architecture Decision Records |
+| `/java-core:java-clean-arch` | Review for Clean/Hexagonal Architecture violations or scaffold a full hexagonal layout with DDD patterns |
 
 ### java-spring
 
@@ -72,6 +73,8 @@ Skills activate automatically based on context, or invoke them explicitly.
 | `/java-spring:java-jpa` | Deep JPA review — N+1 queries, fetch strategies, projections, Specifications |
 | `/java-spring:java-logging` | Review logging — SLF4J, MDC, structured logging, PII safety |
 | `/java-spring:java-crud` | Generate a complete CRUD feature in an existing project |
+| `/java-spring:java-security` | Review or generate Spring Security config — JWT, OAuth2, method security, CORS (Boot 2.x & 3.x) |
+| `/java-spring:java-openapi` | Generate or review OpenAPI/Swagger docs — `@Tag`, `@Operation`, `@Schema`, JWT auth scheme (springdoc v1/v2) |
 
 ### java-quality