fix(rust): protocol 13 step 2 — expiry, plugin loads, the loading hold, NPC names, the link fleet (F2 F5 F6 F7 F8 F13 F14)

The module's half of PLAN_FIXES §6 step 2 (decisions D181-D185, docs#288).

- F13/F14 (D170, D183): `world.expired`, recognisable from protocol 13 by its
  `what`, is handed to core as the resource the zone step ledgered
  (`world`, `<serverId>:<id>`) through ctx.events.expired, which records it
  `expired`. coreApi moves to ^1.11.0 (website#209).
- F8 (D184): `plugin.loaded` / `plugin.unloaded` mark the permission sync dirty
  when the plugin added or removed permissions, so an unresolved grant lands on
  the next tick instead of the fifteen-minute audit.
- Catalogue: plugin.loaded/unloaded, world.expired and lease.expired are staff
  kinds. The last two were never classified (default deny kept them off public
  pages); the test now covers every event kind through protocol 13.
- F7: permission and title pushes hold while the stored hello says
  `worldReady: false` (a human's "sync now" does not); a failed or refused
  permission sync now logs at warn.
- F2 (D185): the killfeed names an NPC attacker — a family (Scientist, Bandit
  guard, Bradley APC…) or the prefab without its variant digits (wolf2 → Wolf).
- F5/F6: a link code is asked of the servers that minted one in the last six
  minutes first, then of the rest, each group in parallel; "unsure" only when
  one of the minting servers is unreachable.
- D182: the admin server list carries the ZoneManager helper's state from the
  hello, and the servers page says what a missing or failed helper costs.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01E14m6SuuY6i1vASFeGDBeY

server/catalogue.js

@@ -84,6 +84,18 @@ const STAFF_KINDS = Object.freeze([
   // the tail of the game server's own log, which is an operator's console and
   // can hold anything a plugin chose to print.
   'config.outcome',
+  // Protocol 13 (F8, D184). Which plugins a server runs, and which permissions
+  // each one registers: an operator's inventory, and the map of what can be
+  // granted there — not a public page's business.
+  'plugin.loaded',
+  'plugin.unloaded',
+  // The world an event borrowed or made, ending on its own deadline:
+  // `lease.expired` since protocol 8 and `world.expired` since protocol 9 — the
+  // latter recognisable only from protocol 13 (F13). Neither was ever classified
+  // (default deny kept both off public pages); both are an event's machinery,
+  // and the public learns what an event did from core's own announcements.
+  'lease.expired',
+  'world.expired',
   // Protocol 6. Clan membership, which the org lead made members-only (D49):
   // who joined which clan, and who threw whom out, is the clan's business. It
   // reaches a clan's own members through core's Team feed, where core resolves
@@ -122,7 +134,7 @@ const PRESENCE_KINDS = Object.freeze([
   'player.tally',
 ])
 
-/** Every kind the protocol defines, through protocol 6. */
+/** Every event kind the protocol defines, through protocol 13. */
 const ALL_KINDS = Object.freeze([...PUBLIC_KINDS, ...STAFF_KINDS])
 
 const PUBLIC = new Set(PUBLIC_KINDS)