Add Xquik plugin and repair contributor guidance

[kriptoburak]

Summary

• add an installable x-twitter-scraper Claude Code plugin for Xquik REST, SDK, export, monitoring, webhook, and remote MCP workflows
• keep the skill read-only by default with explicit approval for private reads, writes, monitors, webhooks, and bulk jobs
• route endpoint questions to current docs, OpenAPI, or MCP explore instead of stale embedded assumptions
• document OAuth-first MCP setup, XQUIK_API_KEY, untrusted-content isolation, and concrete input/output examples

Independent Repository Fixes

• update CONTRIBUTING.md from obsolete marketplace fields path and type to the repository's current source contract
• restore the shipped Sentry plugin in the root README table so every marketplace entry is discoverable

Validation

• validate all 4 plugin manifests against schemas/plugin-schema.json
• verify marketplace names and versions match their source manifests
• verify all 4 marketplace entries appear in the root README
• parse and validate the Xquik skill frontmatter
• verify the live OpenAPI x-api-key header contract
• verify all Xquik, docs, MCP docs, OpenAPI, and repository links
• verify the remote MCP endpoint returns its expected authentication challenge
• jq empty .claude-plugin/marketplace.json plugins/x-twitter-scraper/.claude-plugin/plugin.json schemas/plugin-schema.json
• git diff --check

Xquik is an independent third-party service. Not affiliated with X Corp. "Twitter" and "X" are trademarks of X Corp.

[kriptoburak]

Published repair commit f8d00b5.

The Xquik plugin now follows the current REST and OAuth-first MCP authentication model, stays read-only by default, requires approval for sensitive or persistent work, isolates X-authored content, and directs endpoint details to current public sources.

The same commit fixes 2 independent repository issues: contributor guidance now uses the real source marketplace field without the obsolete type field, and the root README again lists the already-shipped Sentry plugin.

Validated all manifests against the repository schema, checked marketplace and README parity, parsed the skill frontmatter, verified live Xquik contracts and links, scanned edited files for prohibited dash patterns, and passed git diff --check.