pub fn cmd_plugin_enable(root: &Path, id: &str) -> Result<()>
scc plugin enable <id> / scc plugin disable <id>: project allow-list in .scc/config.yaml. Engine owns the mutation; CLI renders.
scc plugin enable <id>
scc plugin disable <id>