Function loadPlugin

Load plugin manifest + module from disk.

Security notes:

• Node default uses node:vm with a minimal CommonJS sandbox.
• For untrusted third-party code in production, use the evaluator option with vm2 or isolated-vm.
• Browser hosts should evaluate plugin code inside a dedicated Web Worker and proxy only the PluginRuntimeApi methods.