pluginTestLayer permission injection

Use pluginTestLayer(assert) to test Promise permission behavior through an activated plugin, registered tool, host adapter, and Tool.Service.snapshot() execution. Chose this boundary-level regression over adapter mocks because success, typed CorrectedError, ordinary defects, and defect-tunneled DeclinedError change representation at different layers; mocks can duplicate or skip those conversions.