Enterprise requirements: private catalogs, allowlists, audit, and policy

[denial123789]

We are collecting requirements for enterprise and private-network deployments of DSH Plugin Store.

We are especially interested in:

• Private or mirrored plugin catalogs
• Organization allowlists and deny lists
• Package signature and provenance checks
• Install approval workflows
• Audit events and retention
• Secret and sensitive-data controls
• Offline installation and internal package registries
• RBAC for browsing, installing, enabling, and removing plugins

Please describe the required workflow without publishing company-sensitive details. If the requirement cannot be discussed publicly, leave a high-level note and contact the maintainers privately.