[kingsleydon]

Summary

• Add the independent Agent Plugins v2 Store validator, vendored 1.0.0 schemas, focused unit tests, documentation, and CI checks.
• Publish the secret-free clawdi-cloud@1.0.0 package with its portable Skill, remote streamable-http MCP URL, and public X-Clawdi-Agent-Plugin marker.
• Keep Hosted authentication outside the package at the existing MITM/explicit egress boundary; no credential configuration, Authorization value, secretRefs, or secretSlots is shipped.

Canonical digest: sha256-tree-v1:f47e156aa043d9f09f8e5e1e7dfa58a3300fb12699a716f887b633d4a21bc38c.

Validation

• Legacy Store validator
• 14 Agent v2 unit tests
• Agent v2 Store validator and canonical digest
• Python compile and JSON static checks
• git diff --check

Hosted rollout remains gated until Runtime #903 is deployed and native runtime probes pass.