feat(infra): secret-admin steps + in-process EnginePlugin entry (ADR …

…0056/0055) (#63)

First stepTypes for infra: step.secret_list/secret_delete (resolve the
secrets.vault module Provider) + step.secret_vault_status/secret_vault_test
(read-only). NewInfraEnginePlugin() exposes them in-process (ADR 0056
dual-shape); gRPC path unchanged. The 4 steps are in-process-only (cataloged
in metadata, NOT capabilities.stepTypes — verify-capabilities mismatch
avoided, P4). Zero engine changes (ADR 0055).

Co-authored-by: Claude <noreply@anthropic.com>

v1.6.16 — stop re-declaring engine-owned infra.* types

Engine v0.83.0 owns the 14 generic infra.* module types. This plugin keeps only
its own module types (infra.admin, infra.http_redirect); removes 13 engine-owned
re-declarations.

workflow-plugin-infra v1.6.15

feat(dns): support Cloudflare proxy intent overrides (#60)

Fixes #59

feat: support scoped forward hosts (#58)

* feat: support scoped forward hosts

* test: cover default forward host

fix: strip parked DNS web records

Strip known registrar parking web records during Cloudflare DNS intent/staging compilation, backfill non-parked alternate provider web records, and keep mail/MX/TXT service records intact.

workflow-plugin-infra v1.6.11

workflow-plugin-infra v1.6.10

Support Namecheap nameserver cutover intent (#54)

workflow-plugin-infra v1.6.8