feat: collapse plugin runtime to one tier behind a plugin SDK

drizzle/postgres/0027_sharp_guardian.sql

@@ -0,0 +1,3 @@
+ALTER TABLE "plugin_permission_grants" ALTER COLUMN "granted_by" DROP NOT NULL;--> statement-breakpoint
+ALTER TABLE "plugin_permission_grants" ADD COLUMN "source" text DEFAULT 'admin' NOT NULL;--> statement-breakpoint
+ALTER TABLE "plugins" ADD COLUMN "last_error" text;

drizzle/postgres/meta/_journal.json

@@ -190,6 +190,13 @@
       "when": 1790083819084,
       "tag": "0026_perfect_masque",
       "breakpoints": true
+    },
+    {
+      "idx": 27,
+      "version": "7",
+      "when": 1790102859387,
+      "tag": "0027_sharp_guardian",
+      "breakpoints": true
     }
   ]
 }