fix(plugins): expose generation versions and mark Safe Mode suspects

[yaojin3616]

Summary

• expose each generation plugin's installed version in the profile dependency map while keeping pnpm pinned to the immutable local generation through a Desktop-managed root override
• route dsh-market removals for projected generation plugins through desired.json so removed plugins do not return on the next launch
• carry harness-log plugin inference into Safe Mode, sort suspects first, and show a warning marker without preselecting removal
• identify bare duplicate-route failures from profile stack ownership and identify entries pending on missing services

Validation

• npm test (76 files, 608 tests)
• npm run typecheck
• npm run build
• real pnpm 10.34.5 offline install test verifies the visible version remains in package.json while the lockfile resolves the generation link