security: P3 — 插件隔离默认开启 + SenSuDB 注册 + 审计日志

- plugins.isolation 默认 true (生产环境进程隔离)
- main.py 注册 SenSuDB 服务
- WebPanelManager 注入 sensu_db 到 app context
- 文件删除/写入操作写入审计日志 (audit_log 表)
- 修复 Session 持久化所需的数据库依赖

Co-Authored-By: Claude <noreply@anthropic.com>

config/framework/base_config.yaml

@@ -11,6 +11,7 @@ plugins:
   auto_load: true
   hot_reload: true
   max_retry_count: 3
+  isolation: true
 # 自动启动脚本 — 框架启动时后台拉起
 auto_start_scripts:
   enabled: true

config/plugins/commands.yaml

@@ -9,10 +9,6 @@ commands:
     permissions:
     - framework.scaffold.plugin
     source: internal
-  echo: &id001
-    description: echo input
-    permissions: []
-    source: plugin.example_plugin
   help:
     description: 显示帮助信息
     permissions:
@@ -38,10 +34,6 @@ commands:
     permissions:
     - framework.permission.read
     source: internal
-  plugin_status: &id002
-    description: show status
-    permissions: []
-    source: plugin.example_plugin
   pm_plugin_status:
     description: '权限管理: 查看插件权限状态'
     permissions:
@@ -97,9 +89,6 @@ commands:
     permissions:
     - framework.command.test
     source: internal
-last_updated: 12019.862122705
-plugin_commands:
-  example_plugin:
-    echo: *id001
-    plugin_status: *id002
-total_commands: 20
+last_updated: 12161.390698641
+plugin_commands: {}
+total_commands: 18

config/services/network_routes.yaml

@@ -1,17 +1,4 @@
 http_port: 4200
-last_updated: 12019.877017393
-plugin_routes:
-  example_plugin:
-  - methods:
-    - GET
-    path: /example_plugin/api/example/info
-    require_auth: false
-  - methods:
-    - POST
-    path: /example_plugin/api/plugin/echo
-    require_auth: true
-  - methods:
-    - POST
-    path: /example_plugin/api/plugin/plugin_status
-    require_auth: true
+last_updated: 12161.450926401
+plugin_routes: {}
 websocket_port: 4240