Marketplace: plugin capability allowlists (network deny-by-default)

[ReBoticsAI]

Summary

Follow-up from #177 buyer protection (pin slice).

Goal

Least privilege at plugin runtime: capability allowlists for network, tools, and records; confirmations; CSP where applicable. Default network deny-by-default for Marketplace-installed plugins.

Acceptance

• Design capability grant model for installed plugins (distinct from coding jail SaaS coding isolation: tenant worktrees, sandboxed shell, optional build containers #112)
• Network deny-by-default for Official/Community installs unless granted
• Document trust tiers + revoke hooks (Core: Authority, audit, and kill switches #96)
• Tests for deny/allow paths

Out of scope

True plugin-per-container sandbox (separate issue if needed).

Related: #177, #180, GodMode-Marketplace intake.