feat: expose codex plugin governance capabilities

tests/local-agent-codex-app-server-runner.test.mjs

@@ -123,6 +123,15 @@ test("codex app-server discovery includes governance and MCP summaries without l
     userInitiatedOnly: true,
     labels: ["归档", "恢复", "分叉", "压缩", "回滚", "改名", "元数据", "活跃干预", "中断", "Shell", "取消订阅"],
   });
+  assert.deepEqual(metadata.pluginGovernanceSummary, {
+    actionCount: 9,
+    lifecycleActionCount: 2,
+    shareActionCount: 4,
+    readActionCount: 3,
+    skillReadAvailable: true,
+    userInitiatedOnly: true,
+    labels: ["安装", "卸载", "读取", "Skill 读取", "共享保存", "共享拉取", "共享删除", "共享目标", "共享列表"],
+  });
 
   const serialized = JSON.stringify(metadata);
   assert.equal(serialized.includes("sk-secret-should-not-leak"), false);