[2026 Plugins] Enforce plugin filesystem and network capabilities

[Nanle-code]

Objective

Require explicit capabilities and deny undeclared access at runtime.

Target area

plugin runtime and manifests

Acceptance criteria

• The objective is implemented with clear handling for invalid input, unsupported environments, and failure paths.
• Automated tests cover the primary flow, at least one boundary case, and at least one failure case.
• User-facing documentation or developer guidance is updated, including compatibility, security, or migration notes where applicable.

Source: .github/roadmap-issues-2026-07-29.json.