Bump crowdstrike-falcon-foundry SHA to v1.1.0

v1.1.0 (4b517aa) adds the swagger2openapi network-call disclosure to
plugin.json and a hook-scope note to the README, addressing both
findings from the initial scan.

.claude-plugin/marketplace.json

@@ -610,7 +610,7 @@
       "source": {
         "source": "url",
         "url": "https://github.com/CrowdStrike/foundry-skills.git",
-        "sha": "a6a500cb64a9e2fef9631e7085e218895958f15d"
+        "sha": "4b517aa5729d5bb5e397ff779f98eb05c91d1b21"
       },
       "homepage": "https://github.com/CrowdStrike/foundry-skills"
     },