fix(manage-secrets): log specific errors when github-apps fallback fails

refactor: use Symbol.for registry for cross-plugin communication

refactor(github-apps): replace shell scripts with @octokit/auth-app

feat(manage-secrets): support GitHub App token via gh_app_token

fix: extract _run from setSecretTool to fix lost `this` binding

fix: correct set_secret tool execute signature to match AgentTool interface

feat: add manage-secrets skill to guide agent on set_secret tool usage

fix: use directory-matching plugin id for manage-secrets

refactor: move manage-secrets to image-extensions for image bake-in

feat: add manage-secrets extension for self-service secret updates

feat: bundle remote-acp-router skill and agent tools into remote-acpx plugin

chore: add openclawVersion to ssh-tools build config

refactor: use plugin-sdk APIs for subscription-auth credential and config writes

fix: persist ServiceState across jiti plugin reloads

fix: register claude_code tool in plugin register() phase