docs: Fix documentation inconsistencies and version references

- Fix version numbers: Changed 4.0.x to 2.0.x in SECURITY.md
- Fix CHANGELOG.md: Changed SuperClaude v4.0.0 to v1.0.0
- Add missing /task command to README.md command list
- Remove non-existent validate-references.sh from CONTRIBUTING.md
- Clarify installation paths (files go to ~/.claude/ not project dir)
- Add MCP server installation notice to README.md
- Ensure consistent v2.0.1 references across all docs

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

README.md

@@ -71,6 +71,8 @@ cd SuperClaude
 
 Zero dependencies. Installs to `~/.claude/` by default.
 
+**Note:** After installation, all configuration files are located in `~/.claude/` (your home directory), not in the project directory.
+
 ## 💡 Core Capabilities
 
 ### 🧠 **Cognitive Personas (Now as Flags!)**
@@ -117,6 +119,8 @@ Development lifecycle coverage:
 - **Magic**: AI-generated UI components
 - **Puppeteer**: Browser testing and automation
 
+**⚠️ Important:** SuperClaude does not include MCP servers. You need to install them separately in Claude Code's MCP settings to use MCP-related flags (--c7, --seq, --magic, --pup).
+
 ### 📊 **Token Efficiency**
 SuperClaude's @include template system helps manage token usage:
 - **UltraCompressed mode** option for token reduction