Bump netsuite-suitecloud to upstream HEAD and add 4 Oracle skills (#2312)

Bumps the pinned SHA (43bacf4 -> cbfc8e8, oracle/netsuite-suitecloud-sdk
master) and expands the skills array to include four skills Oracle has
added upstream since the original consolidation:

  - netsuite-owasp-secure-coding
  - netsuite-sdf-project-documentation
  - netsuite-suitescript-records-reference
  - netsuite-suitescript-upgrade

Validated locally with `claude plugin validate` (passes). Author: Oracle
NetSuite (UPL-1.0). Opened manually because the SHA-bump automation skips
skills-only git-subdir entries that have no literal plugin.json.

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

.claude-plugin/marketplace.json

@@ -1908,13 +1908,17 @@
         "url": "https://github.com/oracle/netsuite-suitecloud-sdk.git",
         "path": "packages/agent-skills",
         "ref": "master",
-        "sha": "43bacf43763e1eedd0892b4652be3d45df94f0e7"
+        "sha": "cbfc8e8fd71b00506ef8654b0633251174e68c84"
       },
       "strict": false,
       "skills": [
         "./netsuite-ai-connector-instructions",
         "./netsuite-sdf-roles-and-permissions",
-        "./netsuite-uif-spa-reference"
+        "./netsuite-uif-spa-reference",
+        "./netsuite-owasp-secure-coding",
+        "./netsuite-sdf-project-documentation",
+        "./netsuite-suitescript-records-reference",
+        "./netsuite-suitescript-upgrade"
       ],
       "homepage": "https://github.com/oracle/netsuite-suitecloud-sdk"
     },