hardening: gate plugins, add hook timeouts, and sanitize metadata#1

mczabca-boop wants to merge 1 commit intosteven1522:feature/plugin-systemsteven1522/tinyclaw:feature/plugin-systemfrom

mczabca-boop:fix/plugin-security-hardeningmczabca-boop/tinyclaw:fix/plugin-security-hardeningCopy head branch name to clipboard