Plugin Path Containment

Agent Plugins 1.0.0 forbids in its schema the unknown field its own spec orders clients to keep

The plugin.json schema sets additionalProperties:false while section 5.2 tells clients to report unknown fields and carry on loading, so the four-line validate-and-reject loader fails the spec in exactly two places and looks correct everywhere else.