Match the product plugin installer dependency isolation and validate compiled public package metadata before installing it through the API.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
The first installed remote smoke failed before allocation because its fixture used the development plugin and workspace loader. Resolve the compiled plugin in the actual npm consumer and keep qualified Cursor outside candidate admission checks.
Co-Authored-By: Paperclip <noreply@paperclip.ing>