Adds a focused non-security CodeQL quality shard for Plugin SDK reply/session delivery runtime contracts.