soulseek, extracted into plugins/soulseek — the platform half

Seventh extraction, and the first of something that was already dead. Soulseek
had been switched off since 2026-08-13: hono.ts carried the router import and
its PROTECTED_MOUNTS entry commented out, so createSidecarProxy never ran and
registerProxiedPrefix was never called; officer-slskd was not in the ecosystem
at all. Because the permission entry had been reduced to api: [], the totality
check was satisfied and the server booted clean — the UI rendered and every
request 404'd. Worth naming: the boot check proves every MOUNTED prefix has a
permission, and is silent about a feature that mounts nothing.

Also closes a live data hazard: schema.ts had the soulseek export commented
out, so the three tables were absent from the drizzle barrel and bun db:push
would have dropped soulseek_favorites, soulseek_browse_snapshots and
soulseek_browse_dirs on any server holding them. rebuild-soulseek-tree.ts
documented the workaround rather than the problem; deleted with the rest.

The connection stays in core service_connections under service 'slskd' while
the mount is now /api/soulseek. Those differ on purpose.

Test fixtures: slskd was canonical in three app-store tests, the third
extraction running to break them. installer.test.ts now builds a literal
fixture instead of reaching into the catalogue — it pins planSteps, which is
installer logic, and no catalogue entry is both provisioned and members:'none'
any more. catalogue.test.ts and members.test.ts re-anchored to vnc/notify/gitea.

Unrelated but mine: check:theme caught 5 palette classes I introduced in
CommandHQ earlier tonight against a baseline of 0. Converted to bg-success /
bg-warning. check:theme is not part of bun test, which is why the green suite
never showed it.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

src/servers/plugins/marketplace.ts

@@ -149,6 +149,27 @@ const BUNDLED: CatalogueEntry[] = [
     // `schema: false` — the connection lives in `service_connections`, a core table. See its manifest.
     has: { api: true, schema: false, sidecar: true, web: true },
   },
+  {
+    appName: 'soulseek',
+    publisher: 'officerdev',
+    version: '1.0.0',
+    platform: '>=1.0.0',
+    label: 'Soulseek',
+    summary: 'Search and download from the Soulseek network, via your own slskd daemon',
+    color: '#22c55e',
+    icon: 'Music2',
+    source: 'https://gitea.officer.dev/plugins/soulseek.git',
+    permissions: [
+      {
+        key: 'soulseek',
+        label: 'Soulseek',
+        description: 'Search and download from the Soulseek network',
+      },
+    ],
+    // `schema: true` unlike transmission: the CONNECTION lives in core `service_connections`, but the
+    // favourites and the cached browse tree are this plugin's own three tables.
+    has: { api: true, schema: true, sidecar: true, web: true },
+  },
   {
     appName: 'vault',
     publisher: 'officerdev',