feat: WebAssembly plugin support with end-to-end host invocation

.github/workflows/ci.yml

@@ -38,6 +38,8 @@ jobs:
         with:
           components: clippy, rustfmt
       - uses: Swatinem/rust-cache@v2
+      - name: WIT consistency check
+        run: make -C crates/cpex-wasm-host check-wit
       - name: rustfmt
         run: cargo fmt --all -- --check
       - name: clippy

.github/workflows/release.yaml

@@ -102,6 +102,7 @@ jobs:
             cpex-orchestration
             cpex-core
             cpex-sdk
+            cpex-wasm-host
             apl-core
             apl-cmf
             apl-cpex

.gitignore

@@ -276,11 +276,14 @@ tmp/
 .continue
 # Hugo build output
 docs/public/
+crates/cpex-wasm-host/wasm/*.wasm
+crates/cpex-wasm-plugin/plugin.wasm
+crates/cpex-wasm-plugin/Cargo.lock
 # python cpex install target(s) — the repo-root install dir the Python CLI
 # materializes venvs into. Leading slash anchors it to the root: unanchored,
 # `plugins/` matched at any depth and swallowed the tracked source trees
 # `builtins/plugins/` and `tests/unit/cpex/fixtures/plugins/` (existing files
 # stayed tracked, but any newly added one was silently unstageable).
 /plugins/
 data/
-plugin-catalog
+plugin-catalog