fix(bitdefender): gate raw destructive calls, allow --json after subcommand

- raw now refuses destructive methods (delete/uninstall/remove/reconfigure)
  without --confirm (it previously bypassed all gating)
- --json is now accepted after the subcommand (shared via a common parent
  parser), matching the documented usage
- drop a placeholder-less f-string
- SKILL.md: document raw gating + that raw echoes upstream responses verbatim

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

.claude/skills/bitdefender/SKILL.md

@@ -92,6 +92,11 @@ label) are intentionally NOT exposed as dedicated subcommands — reach them onl
 through `raw` after confirming the correct params against
 `references/api-reference.md` and the official Bitdefender docs.
 
+`raw` itself refuses destructive method names (delete/uninstall/remove/
+reconfigure) unless `--confirm` is passed. Note that `raw` prints the upstream
+response verbatim — it can carry data from the called method, so do not paste
+raw output into tickets/logs without review.
+
 ## Common commands
 
 ```bash