feat: threat-db v2.4.0 + MCP guide section + resource evals + ci

## threat-db v2.4.0
- CVE-2026-27735: path traversal in mcp-server-git git_add (CVSS 6.4)
- Campaign: Clinejection (Cline CLI 2.3.0 supply chain, 4000 downloads)
- T012: AI Recommendation Poisoning (Microsoft research, 50+ prompts)
- 3 new sources (NVD, Snyk, Microsoft Security Blog, Hacker News)

## guide/ultimate-guide.md
- New section "This Guide as an MCP Server" (§10) — installation,
  tools list, dev mode, usage examples, slash commands

## docs/resource-evaluations
- eval #070: claude-code-best-practice .claude/ config (score 4/5)
- eval #071: Steven Ge technical writing workflow (score TBD)
- eval #072: Rippletide AI reliability platform (score 2/5, watch only)
- 2026-02-26: boristane SDLC dead post evaluation
- README: count 60→72 evals, add #072 entry

## ci + config
- .github/workflows/trigger-landing-deploy.yml — auto-trigger landing
  rebuild on push to main (guide content changes)
- .gitignore: add .claude/agents/ exception + mcp-server/dist/ ignore

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.github/workflows/trigger-landing-deploy.yml

@@ -0,0 +1,26 @@
+name: Trigger landing site rebuild
+
+on:
+  push:
+    branches: ["main"]
+    paths:
+      - "guide/**"
+      - "machine-readable/**"
+      - "examples/**"
+
+jobs:
+  trigger:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Dispatch rebuild to landing site
+        uses: actions/github-script@v7
+        with:
+          github-token: ${{ secrets.LANDING_DEPLOY_TOKEN }}
+          script: |
+            await github.rest.actions.createWorkflowDispatch({
+              owner: 'FlorianBruniaux',
+              repo: 'claude-code-ultimate-guide-landing',
+              workflow_id: 'deploy.yml',
+              ref: 'main',
+            })
+            console.log('Landing site rebuild triggered')