feat(plugins): core read-only scripts and user plugin system

Introduce plugin/<id> installs (zip, HTTPS git, example, fork),
jerapah-plugin.json manifests with jerapah semver ranges, isolated
plugin dirs under data/plugins, and app version 0.1.0. Core scripts
are non-editable; get-current-time moves to examples/plugins.

Co-authored-by: Nasyarobby Putra <nasyarobby@gmail.com>

packages/server/workflows/default/cron-example.yaml

@@ -2,7 +2,7 @@ name: cron example
 description: |
   this workflow triggered by cron
 scripts:
-  - script: get-current-time.js
+  - script: plugin/get-current-time
   - set:
       expression: '{"message": context.datetime}'
   - script: ntfy.js

packages/server/workflows/default/test.yaml

@@ -1,6 +1,6 @@
 name: jsonata
 scripts:
-  - get-current-time.js
+  - plugin/get-current-time
   - script: jsonata.js
     config: 
       expression: '{"message": data.datetime & " " & data.processId}'

packages/server/workflows/default/time-and-comic-to-ntfy.yaml

@@ -3,7 +3,7 @@ description: >
   Fan-in from two scripts (current time + monkeyuser comic), then send to ntfy.
 scripts:
   - id: time
-    script: get-current-time.js
+    script: plugin/get-current-time
 
   - id: comic
     script: fetch-html.js

packages/server/workflows/default/time-to-ntfy-example.yaml

@@ -2,7 +2,7 @@ name: time to ntfy example
 description: |
   this workflow will send a message to ntfy with the current time
 scripts:
-  - script: get-current-time.js
+  - script: plugin/get-current-time
     config:
       key: ""
   - script: ntfy.js