Function discover_and_load 

pub fn discover_and_load(config: &Config) -> PluginLoadOutcome

The single entry point: resolve config’s plugin gates (crate::Config::plugins_enabled, is_trusted) and, only if both pass, discover + parse every manifest under the scanned directories. See the module doc comment’s “Trust model” section for the full D-10 contract this enforces.