build(plugin): bundle verified native runtime artifacts

[kmbroai]

Summary

Include the verified native OS primitives in the standalone plugin and npm package so subsequent TypeScript helpers can run without compiling or downloading native code at runtime.

Changes

• Assemble all eight Linux, macOS, and Windows payloads through reusable build workflows, and supply them to package, test, release, and container jobs.
• Ship the same complete native tree and dependency notices in both package surfaces. Missing inputs fail the build.
• Verify the installed package loads its platform addon with an empty PATH, and document local build preparation.

Testing

• Built the real package with all eight CI-verified binaries and six notice files. Full package inspection and installed CLI, SDK, MCP, credential-locking, and worker checks passed.
• Built the Docker image and passed version, help, info, empty-PATH native loading, and the findings-service smoke test with persistent SQLite storage.
• Two full SDK runs each completed with 2,137 passing tests, 41 skips, and one unchanged ambient-credential test failure. That test passed with ambient API keys removed; the credential code and test are unchanged by this PR.
• TypeScript compilation, types, formatting, portable source checks, Ruff, and focused build/workflow tests passed.
• Three independent native reviews and a separate verifier found no actionable issues on the final commit.

Risk and rollout

Stacked on #796. Adds about 3.8 MB of native binaries and notices before archive compression. Local source builds now require the documented prebuilt inputs. Hosted CI must verify the reusable artifact assembly and downstream platform jobs on this branch. Product helpers are switched to TypeScript in subsequent changes.

Public disclosure review

• No customer, partner, prospect, or user identities, data, or identifying details are included.
• No credentials, personal data, private source, scan findings, or nonpublic links or tickets are included.
• I reviewed the branch name, title, description, commits, changes, comments, logs, screenshots, attachments, and links for public disclosure.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
🔒 Security Review	✅ Completed 2026-09-03T01:24:30.229552Z	9cea871	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.