feat: namespace plugin permissions and keep them valid when a plugin is off

packages/plugin-sdk/src/testing.ts

@@ -181,6 +181,8 @@ export function createFakeContext(
     rbac: {
       // Passes everything through: a test asserting a permission gate should
       // drive PermissionManager, not this double.
+      has: async () => true,
+      hasFor: async () => true,
       require: () => ((_req, _res, next) => next()) as PluginMiddleware,
     },