fix(ci): Track canonical plugin drift

Treat generated plugin mirrors and marketplace outputs as managed
canonical artifacts so the main-branch sync bot can stage and commit
them instead of failing on unmanaged drift.

Ignore web-app coverage output during maintainer runs and update the
mirrored Office unpack scripts so plugin copies stay aligned with the
hardened source implementations.

tools/scripts/tests/automation_workflows.test.js

@@ -60,6 +60,10 @@ assert.strictEqual(
 for (const filePath of [
   "apps/web-app/public/sitemap.xml",
   "apps/web-app/public/skills.json.backup",
+  "data/plugin-compatibility.json",
+  ".agents/plugins/",
+  ".claude-plugin/",
+  "plugins/",
 ]) {
   assert.ok(
     generatedFiles.derivedFiles.includes(filePath),
@@ -67,6 +71,13 @@ for (const filePath of [
   );
 }
 
+const webAppGitignore = readText("apps/web-app/.gitignore");
+assert.match(
+  webAppGitignore,
+  /^coverage$/m,
+  "web-app coverage output should be ignored so maintainer sync jobs stay clean",
+);
+
 for (const filePath of [
   "README.md",
   "package.json",