Tighten-only guards on each plugin's own tools (secrets; dossier ID numbers;
intelligence reset confirm + public-transfer email screen; destructive
cognitum-iot confirm), /<short>-mod local commands, status files, tests and
smoke steps. Minor version bumps.
Co-Authored-By: RuFlo <ruv@ruv.net>
