Plugin API/config stability guarantee (semver)

[baokhang83]

Since only the plugin ships, 1.0 semver applies to the goal/parameter/config + report-schema surface, not an internal core artifact.

Scope

• Document the public surface (goals, parameters, config keys, report schema) and the semver policy for it.

Done when

• Public surface documented; deprecation policy stated.