[sosidudku1]

What changed

• Approval rules: only allow rules are limited to simple commands. Deny and ask rules apply to every command in a chain.
• Plugins: the desktop app loads a plugin's skills, MCP servers and hooks, and has a Settings › Plugins screen. Installing stays in the terminal, and plugin slash commands run in the TUI.
• Risk check: categories that cannot be granted, such as trust_config, and reads outside the working scope are not rated and always ask.

The README had no stale 0.6.13 or 0.0.7 version or release link, so none were changed.

Status

README only, no code changed. No build or tests run.

Fixes ATO-1361