[criptogus]

Summary

 archive without plugin.json.version
-  export metadata contains an undefined version
+  export metadata uses its exact reviewed registry version
   original archive files remain unchanged

Ensures solution lockfiles and pinned download filenames remain versioned when the optional original manifest field is absent. Explicit mismatches still fail. Release metadata is included (chore: bump platform version 0.6.0 to 0.6.1) to prevent a redundant bot bump.

Evidence

• Before: an accepted source manifest may legally omit version metadata.
• After: regression test proves the exact registry version is returned without mutating the original manifest and rejects explicit mismatches. Full project validation includes 207 tests, strict lint, types, build, content and mirror checks. No schema or UI behavior changes.

Merge Danger

Door: two-way

Blast Radius: downloads

No original files, hashes, approval gates or package access rules change.