d55b2b951c
_symlink entries in plugin tarballs are skipped (security posture, correct) but now emit a logger.warning so operators can audit what was dropped: "skipping symlink in plugin tarball (not supported for security): <name> -> <target>" Added test_safe_extract_logs_warning_for_skipped_symlink asserting the warning is present in caplog records at WARNING level. All 211 tests pass (+1 new). known-issues.md updated.