Plugin Runtime

Live enforcement surface for installed plugins: per-install quota consumption, circuit-breaker state, kill switch, and the immutable invocation ledger showing every allow/deny decision.