Operator-owned policy table keyed by .wasm file stem. Built at
boot from <config_dir>/wasm/policy.json and looked up by the
daemon’s wasm loader when constructing per-plugin host state.
One pool entry surfaced by WasmPoolStats::snapshot. Mirrors the
shape vane-wasm produces internally; lives in vane-core so the
daemon can consume the data via a trait object without depending on
vane-wasm (which sits behind the optional wasm feature).
Read-only introspection of WASM pool runtime state. Implemented by
vane-wasm::WasmtimeRuntime; held by the daemon as
Option<Arc<dyn WasmPoolStats>> so builds without the optional
wasm feature can still consume the trait surface and serve the
get_pools mgmt verb (returning an empty list).