Lock plugin build tools for frozen E2E installs

[tom-sapletta-com]

Summary

• lock setuptools and wheel in the dev-only portable dependency graph
• enable local plugin distribution metadata without build isolation or dependency resolution
• validate GraphQL, Proto, and SQL entry-point discovery with 77 focused tests

Validation

• uv lock --check --no-sources
• locked dev + nlp2env sync
• resolver-free editable install of four local plugins
• 77 passed focused tests
• ./project/governance-check.sh
• three Compose config checks and both Docker build checks

Prerequisite for ticket-005 and #10.

[ifuri-validator-agent]

Deterministic Validator approval for exact head 8b5abe40b0da0c6b9fd5d1f761e8bdbc3b61e63c.

Ticket: ticket-006
Correlation ID: testql-pr-15-ticket-006
Model: zai/glm-5.3
Reviewed diff chunks: 2
Advisory LLM verdict: APPROVE
Advisory summary: Reviewed all 2 diff chunk(s). Dev-only addition of setuptools and wheel to the dev extra with a regenerated portable lock, plus governance ticket scaffolding. Changes are scoped as declared: no runtime dependencies, Dockerfile, or plugin manifest changes. Test results report PASS. | Second chunk of the diff updates uv.lock and pyproject metadata to add setuptools and wheel as dev-extra dependencies with proper hashes and registry URLs. All package entries are from the official PyPI registry with matching hashes; no scripts or workflow changes. CI check passed.
Advisory findings: none
The LLM output above is advisory and was not used as the approval trust root.
Merge will be attempted after this approval when explicitly authorized.

Decision record (recomputable)

DECISION D-006-2511
TICKET ticket-006
HEAD_SHA 8b5abe40b0da0c6b9fd5d1f761e8bdbc3b61e63c
CORRELATION_ID testql-pr-15-ticket-006
ACTOR agent:ifuri-validator-agent[bot]
APPLIED_RULE P-CORE-015
INPUT author_login = "tom-sapletta-com"
INPUT observed_checks = ["test=PASS"]
INPUT required_checks = ["test"]
INPUT required_checks_source = "protected registry (env/request)"
INPUT reviewer_login = "ifuri-validator-agent[bot]"
INPUT superseded_checks = []
VERDICT APPROVE AUTHORITY DETERMINISTIC
REJECTED REQUEST_CHANGES BECAUSE NO_UNSAFE_CHANGE_REASON_FOUND
ADVISORY llm_verdict = "APPROVE" MODEL "zai/glm-5.3"
ASSERT VERDICT_AUTHORITY != "ADVISORY"