Closes-part-of oleks/cluster#271.
- integration-preflight: framed as the non-skippable step 0 of any
multi-step rollout; new procedure step 6 requires ONE real authenticated
request against every external endpoint FROM THE RUNTIME CONTEXT, with
the allowManagementFrom case (oleks/armer#171) as the worked example;
output now carries a dependency table alongside the layer table;
description rewritten so the skill actually routes on rollout-shaped work.
- onboard-host / integrate-service / finish-migration: each names
integration-preflight as its step 0 entry gate.
- failure-catalog: adds F12 (external dependency never smoke-tested from
the runtime context, oleks/armer#171) and F13 (preflight treated as a
judgment call, oleks/cluster#260 + oleks/armer#171).
- README + plugin.json 1.0.0 -> 1.0.1.