A failed plugin install rolls back instead of leaving a half-written cache

Plugin extraction and version caching now wrap dependency install, manifest write and cache promotion in a single try/catch with an explicit rollback, so a failure discards the staged directory rather than leaving a broken cached version behind.