refactor: replace github_stars with zero_config_setup in competitive rubric

Stars measure popularity, not helpfulness. New criterion measures
install-to-insights friction (one_command/light_config/heavy_config/hosted_only).

Also updates competitor scoring from fresh research (Feb 2026):
- SonarQube MCP tools corrected 34→15 (official server count)
- CodeQL secret_detection separated (unbundled product), setup→light_config
- Semgrep MCP tools 3→9, vuln_reachability added
- CKB/CodeMCP: +complexity, +blame, +hotspots, +federation, MCP 76→92
- roam-code: MCP 101→102, CLI 139→140

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: CosmoHac