example leaves too; plugins/ is documentation now

Done with `tea` as admin: plugins/offscale made public, plugins/example created
public, both verified anonymously over https — which is the check that matters,
because fetch.ts clones with no credentials and a private plugin simply cannot be
installed from the marketplace.

  plugins/example    8 files, cloned back and diffed identical
  plugins/offscale   now public (was private, so was uninstallable)

`.gitignore` is one line now — `/plugins/*/`. The trailing slash is the whole
design: it ignores DIRECTORIES, so files at the top of plugins/ stay tracked. The
documentation about plugins belongs to the platform; the plugins do not.

All three are in the marketplace catalogue, which is what makes this reversible:
before this, untracking offscale meant a fresh install could never get it back.
Now the store is the way in for all three.

CatalogueEntry gains `icon` (a lucide name) alongside `iconUrl`. Both new entries
ship glyphs rather than artwork, and without it they drew the generic puzzle piece
in the store and their real icon after install — which reads as the icon changing
rather than the store not knowing it.

EXTRACTING-A-PLUGIN.md pointed at four directories a fresh checkout no longer has.
It now gives repository URLs, says up front that this directory holds documentation
rather than plugins, and carries a table of where each one went. Checked first that
no tracked source statically imports a plugin directory — none does, so a fresh
clone still builds.

tsgo clean, frontend builds, 787 pass / 7 fail (unchanged).

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

src/servers/plugins/marketplace.ts

@@ -50,6 +50,12 @@ export type CatalogueEntry = {
    * has never seen, so the catalogue carries a link rather than a file.
    */
   iconUrl?: string;
+  /**
+   * A lucide NAME, for a plugin that ships no artwork. Mirrors `manifest.icon`, and the same precedence
+   * applies: `iconUrl` wins where both are given. Without this a glyph plugin draws the generic puzzle
+   * piece in the store and its real icon only after install, which reads as the icon having changed.
+   */
+  icon?: string;
   /**
    * Where to clone from. HTTPS, never SSH: a marketplace serves the same URL to every machine, and an
    * `ssh://` clone assumes a key on that host for that user — true on the machine that published the
@@ -110,6 +116,40 @@ const CATALOGUE: CatalogueEntry[] = [
     ],
     has: { api: true, schema: true, sidecar: true, web: true },
   },
+  {
+    appName: 'offscale',
+    publisher: 'officerdev',
+    version: '1.0.0',
+    platform: '>=1.0.0',
+    label: 'Offscale',
+    summary: 'Your tailnet — machines, users, pre-auth keys, access policy and device invites',
+    color: '#818cf8',
+    icon: 'Network',
+    source: 'https://gitea.officer.dev/plugins/offscale.git',
+    permissions: [
+      {
+        key: 'offscale',
+        label: 'Offscale',
+        description: 'The tailnet: machines, routes, keys and ACLs',
+        readOnlyWrites: ['/ssh-test', '/policy/assist'],
+      },
+    ],
+    has: { api: true, schema: true, sidecar: true, web: true },
+  },
+  {
+    appName: 'example',
+    publisher: 'officerdev',
+    version: '1.0.0',
+    platform: '>=1.0.0',
+    label: 'Example',
+    summary: 'The reference plugin — one route, nothing else',
+    color: '#94a3b8',
+    icon: 'Puzzle',
+    source: 'https://gitea.officer.dev/plugins/example.git',
+    permissions: [{ key: 'example', label: 'Example', description: 'The reference plugin' }],
+    // No `db/` — the one part it deliberately omits, so the smallest real plugin stays the smallest.
+    has: { api: true, schema: false, sidecar: true, web: true },
+  },
 ];
 
 /**