feat(runtime): add plugin platform foundation - #3729

Summary

• migrate the generic plugin platform foundation from the earlier Draft, without concrete Contribution integrations
• add pure desired-state Entry reduction, persistent desired/runtime composition snapshots, stable digests, package manifest/bundle/store/loader, and package-scoped reload
• make Runtime Host the sole authority with durable-first mutation, fail-open Plugin recovery, desired/actual divergence diagnostics, rollback/fencing, drain, close, and a bounded protocol
• keep concrete Tool, UI, Hook, Event, Listener, Timer, Desktop, Renderer, IPC, and product integrations out of this PR

Architecture

This is based on the Fiber-owned Context lifecycle model merged in #3479:

• every package Entry mounts through its parent package Fiber Context; scope-only Entries do not invent a Fiber
• desired composition is committed before live Runtime convergence
• recovery isolates malformed packages and failed Entries instead of blocking Runtime Host startup
• package reload atomically replaces only affected mounts and preserves unrelated Fibers and desired generation
• manifest configuration (including defaults), dependency cycles, and active dependency topology are validated before publication
• package generations are Host/package-owned; Entry Fibers own only instantiated Plugin resources
• query surfaces keep desired state, actual inspections/runtime projection, and bounded failures distinct

Verification

• @maka/core, @maka/storage, @maka/runtime, and @maka/runtime-host builds passed
• focused Plugin foundation tests: 50/50 passed
• Runtime full suite: 3082 passed, 13 skipped, 0 failed
• Runtime Host full suite: 1159 passed; one unrelated shared-cache registration.json race failed under parallel execution and passed immediately in isolated rerun (1/1)
• protocol epoch guard: 48 -> 49
• ASF headers, Biome, git diff --check, and Windows test inventory passed