Manifest-driven activation narrows startup/runtime plugin loading and preserves trust boundaries.
Plugin loading boundaries
Plugin activation/loading is narrowed to manifest-declared needs across CLI, providers, and channels.
This centralizes owner-policy and trust checks so startup and runtime activation avoid loading unrelated plugin runtime, improving predictability and reducing accidental surface expansion.