fix: critical plugin structure and configuration fixes

- Fix hooks.json: use valid PostToolUse event (not invalid task-completed)
- Move projman/plugin.json to projman/.claude-plugin/plugin.json
- Fix projman/.mcp.json to use venv python paths
- Add cmdb-assistant to marketplace.json
- Update .gitignore: allow .env files (private repo)
- Fix create_labels.py: use env vars instead of hardcoded token
- Add CLAUDE.md critical rules section to prevent future mistakes

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

create_labels.py

@@ -6,8 +6,10 @@ Creates 28 organization labels + 16 repository labels = 44 total
 import requests
 import sys
 
-GITEA_URL = "https://gitea.example.com"
-TOKEN = "ae72c63cd7de02e40bd16f66d1e98059c187759b"
+import os
+
+GITEA_URL = os.getenv("GITEA_API_URL", "").rstrip("/api/v1")
+TOKEN = os.getenv("GITEA_API_TOKEN", "")
 ORG = "bandit"
 REPO = "support-claude-mktplace"