Runtime plugin loading

Sourceright discovers plugin capabilities from validated manifests.

• Keep trust and provenance explicit.
• Preserve the read-only default surface.
• Use the registry status matrix in Plugin registry when turning implementation statuses into public-facing readiness language.