v0.3.8 — update closes the stale-plugin loop

update closes the stale-plugin loop: a repo can only sync to the installed plugin version, so "nothing to do" could mask a stale install. update.mjs now names the installed version, and the workflow probes the marketplace clone on disk (zero network) and offers the consented channel refresh (claude plugin marketplace update / npx skills update), ending with the user-only reload step.