feat(ci-infra): declare and enforce every MCP plugin's destructive-operation policy (#1288)