feat: harden plugin api for separate repos, signed updates and generic external login

plugins/automations/tests/backend/activate.test.ts

@@ -61,7 +61,7 @@ describe("automations activate", () => {
       capabilities: manifest.capabilities.filter((c) => c !== "notify:send"),
     });
     await expect(
-      withoutNotify.ctx.notify.send([1], { title: "t", body: "b" }),
+      withoutNotify.ctx.notify.send({ title: "t", body: "b" } as never),
     ).rejects.toBeInstanceOf(PluginCapabilityError);
   });
 

plugins/automations/tests/backend/triggers.test.ts

@@ -99,7 +99,7 @@ describe("onMetrics", () => {
     });
 
     expect(run).toHaveBeenCalledTimes(1);
-    expect(run.mock.calls[0][0]).toMatchObject({
+    expect((run.mock.calls[0] as unknown[])[0]).toMatchObject({
       triggerType: "metric_threshold",
       triggerHostId: 7,
     });