Add plugin provenance review

[blessdyb]

Summary

• add reviewable plugin package provenance, permissions, privacy metadata, P-256 signature verification, and stable approval fingerprints
• split plugin import into review-before-install and surface signature/provenance details in Settings
• update plugin template, validator, docs, generated site, localization catalogs, and provenance/runtime tests

Verification

• node templates/inspection-plugin/validate.js
• python3 scripts/i18n_extract.py --check
• python3 scripts/check_site.py
• xcodebuild test -project Flowlight.xcodeproj -scheme Flowlight -destination 'platform=macOS' -only-testing:FlowlightTests/PluginTests CODE_SIGN_IDENTITY=- CODE_SIGN_STYLE=Manual DEVELOPMENT_TEAM= CODE_SIGN_ENTITLEMENTS=
• xcodebuild test -project Flowlight.xcodeproj -scheme Flowlight -destination 'platform=macOS' -only-testing:FlowlightTests/LocalizationTests CODE_SIGN_IDENTITY=- CODE_SIGN_STYLE=Manual DEVELOPMENT_TEAM= CODE_SIGN_ENTITLEMENTS=
• xcodebuild -project Flowlight.xcodeproj -scheme Flowlight -derivedDataPath build CODE_SIGN_IDENTITY=- CODE_SIGN_ENTITLEMENTS= CODE_SIGN_STYLE=Manual DEVELOPMENT_TEAM= test
• open build/Build/Products/Debug/Flowlight.app && confirmed the debug app process started

🤖 Generated with Claude Code