Fix the private QA wrapper and source-checkout runtime paths so
qa-lab, qa-channel, and qa-matrix resolve their local-only SDK
surfaces and staged bundled plugins reliably.
This keeps private QA behavior local-only, restores source-runner
discovery, and makes the isolated gateway runtime load the right
plugin tree under Node.
