Stable C ABI and trusted in-process loader for custom inference runtimes.
Loading native code is never driven by a model package. Applications first
install a plugin into a separate directory, explicitly enroll its canonical
path and SHA-256 in [RuntimePluginTrustStore], then run discovery.