Dynamic skill discovery now respects projectSettings and strictPluginOnlyCustomization policies. When plugin-only customization is enforced, non-plugin skill sources are blocked.
Evidence
Skill discovery policy (search for "Dynamic skill discovery skipped: projectSettings disabled or plugin-only policy")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
