stability

Scan installed dsh plugins and grade stability risk (hook surface, startup work, preflight, deps) with optional isolated install verification