Defensive fix: idempotent route mounting. Guards against duplicate webServer routes when a preset/composition remounts the plugin in the same process (upstream class: deepseek-harness #1862). The previous route set is disposed before mounting a new one, keyed by profile. 10/10 tests + full DSH smoke (fresh profile → boot → HTTP one-click install) pass.