[extension] Update Security Review extension to v2.0.0 (#4223)

* Update Security Review extension to v2.0.0

Update security-review extension submitted by @DyanGalih:
- extensions/catalog.community.json (version, download_url, repository, author, tags, tools, updated_at)
- docs/community/extensions.md community extensions table

Closes #4217

Assisted-by: GitHub Copilot (model: claude-sonnet-4.6, autonomous)
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Preserve security review tool versions

Carry the submitted minimum versions for the required git tool and optional Node.js CLI dependency into the community catalog entry.

Assisted-by: GitHub Copilot (model: GPT-5.6 Sol, autonomous)

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: 312140f1-9c82-4e1e-a0ca-9a687ff71e27

---------

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Manfred Riem <15701806+mnriem@users.noreply.github.com>
Copilot-Session: 312140f1-9c82-4e1e-a0ca-9a687ff71e27

Author: 3 people

docs/community/extensions.md

@@ -129,7 +129,7 @@ The following community-contributed extensions are available in [`catalog.commun
 | Review Extension | Post-implementation comprehensive code review with specialized agents for code quality, comments, tests, error handling, type design, and simplification | `code` | Read-only | [spec-kit-review](https://github.com/ismaelJimenez/spec-kit-review) |
 | Ripple | Detect side effects that tests can't catch after implementation — surface hidden ripple effects across 9 analysis categories | `code` | Read+Write | [spec-kit-ripple](https://github.com/chordpli/spec-kit-ripple) |
 | SDD Utilities | Resume interrupted workflows, validate project health, and verify spec-to-task traceability | `process` | Read+Write | [speckit-utils](https://github.com/mvanhorn/speckit-utils) |
-| Security Review | Full-project secure-by-design security audits plus staged, branch/PR, plan, task, follow-up, and apply reviews | `code` | Read+Write | [spec-kit-security-review](https://github.com/DyanGalih/spec-kit-security-review) |
+| Security Review | Full-project secure-by-design security audits plus staged, branch/PR, plan, task, follow-up, and apply reviews | `code` | Read+Write | [security-review](https://github.com/DyanGalih/security-review) |
 | SFSpeckit | Enterprise Salesforce SDLC with 18 commands for the full SDD lifecycle. | `process` | Read+Write | [spec-kit-sf](https://github.com/ysumanth06/spec-kit-sf) |
 | Ship Release Extension | Automates release pipeline: pre-flight checks, branch sync, changelog generation, CI verification, and PR creation | `process` | Read+Write | [spec-kit-ship](https://github.com/arunt14/spec-kit-ship) |
 | Spec Changelog | Auto-generate changelogs and release notes from spec git history and requirement diffs | `docs` | Read-only | [spec-kit-changelog](https://github.com/Quratulain-bilal/spec-kit-changelog) |

extensions/catalog.community.json

@@ -4256,35 +4256,39 @@
       "name": "Security Review",
       "id": "security-review",
       "description": "Full-project secure-by-design security audits plus staged, branch/PR, plan, task, follow-up, and apply reviews",
-      "author": "Spec-Kit Security Team",
-      "version": "1.5.3",
-      "download_url": "https://github.com/DyanGalih/spec-kit-security-review/archive/refs/tags/v1.5.3.zip",
-      "repository": "https://github.com/DyanGalih/spec-kit-security-review",
-      "homepage": "https://github.com/DyanGalih/spec-kit-security-review",
-      "documentation": "https://github.com/DyanGalih/spec-kit-security-review/blob/main/README.md",
-      "changelog": "https://github.com/DyanGalih/spec-kit-security-review/blob/main/CHANGELOG.md",
+      "author": "DyanGalih",
+      "version": "2.0.0",
+      "download_url": "https://github.com/DyanGalih/security-review/archive/refs/tags/v2.0.0.zip",
+      "repository": "https://github.com/DyanGalih/security-review",
+      "homepage": "https://github.com/DyanGalih/security-review",
+      "documentation": "https://github.com/DyanGalih/security-review/blob/main/docs/usage.md",
+      "changelog": "https://github.com/DyanGalih/security-review/blob/main/CHANGELOG.md",
       "license": "MIT",
       "category": "code",
       "effect": "read-write",
       "requires": {
-        "speckit_version": ">=0.1.0"
+        "speckit_version": ">=0.1.0",
+        "tools": [
+          { "name": "git", "version": ">=2.0.0", "required": true },
+          { "name": "node", "version": ">=22.0.0", "required": false }
+        ]
       },
       "provides": {
-        "commands": 9,
+        "commands": 10,
         "hooks": 3
       },
       "tags": [
         "security",
-        "devsecops",
         "audit",
         "owasp",
-        "compliance"
+        "compliance",
+        "governance"
       ],
       "verified": false,
       "downloads": 0,
       "stars": 0,
       "created_at": "2026-04-03T03:24:03Z",
-      "updated_at": "2026-06-08T00:00:00Z"
+      "updated_at": "2026-08-20T00:00:00Z"
     },
     "sf": {
       "name": "SFSpeckit — Salesforce Spec-Driven Development",