Adds claude-tabletop to Security & Systems (alphabetically first) — two paired Claude Code skills for project-aware tabletop exercises.

• What it does: /tabletop-exercise surveys the project (README, manifests, IaC, CI/CD), proposes scenarios matching the actual stack, and generates a facilitator runbook plus an interactive single-file HTML runbook with live exercise timer, per-inject reveal overlays, decision-log auto-timestamping, and JSON export. /tabletop-aar ingests filled forms (or the HTML's JSON export) and drafts a structured After-Action Report with severity-tagged action items.
• Repo: https://github.com/cjcsecurity/claude-tabletop
• Live demo: https://live-demo-zeta-one.vercel.app
• License: Apache-2.0
• Coverage: 9 domains (cybersec, prodsec, devops/SRE, privacy/compliance, data/ML, platform, mobile, AI safety, business continuity), 54 scenarios, 38 inject archetypes, 28 NPC personas, 7 compliance frameworks (NIST CSF, SOC 2, PCI, ISO 27001, HIPAA, GDPR, MITRE ATT&CK).

Followed the list's existing entry format (single bullet, *By [@author](url)* attribution). Happy to adjust placement, length, or wording on review.