Refresh role plugins from maintained source

[vdeshpande-oai]

Summary

• mirror the final Data Analytics 0.2.6 snapshot requested by the plugin owners
• sync Product Design 0.1.50 and Sales 1.0.8
• remove the obsolete Financial Markets plugin
• preserve public-release metadata, MIT licensing, portable connector IDs, and placeholders for workspace-specific app IDs

This supersedes the narrower removal in #12 by including that cleanup in the full source refresh.

Impact

The open-source role plugins now match the requested maintained releases while remaining portable for external workspaces. This refreshes workflows, routing, UI assets, reporting support, and plugin metadata instead of leaving the public repository on its June snapshot.

Validation

• Data Analytics: npm test (166/166 passed)
• Data Analytics: npm run typecheck
• Data Analytics: npm run build
• Product Design prototype bootstrap smoke test
• all tracked JSON and YAML parsed successfully
• git diff --check
• source-tree parity check, excluding the deliberate public manifest and app-binding transformations
• public-safety scan for workspace-specific app IDs, internal registry URLs, proprietary license metadata, maintained-repo links, and obsolete Financial Markets references

Dependency audit note

The exact Data Analytics 0.2.6 lockfile currently reports Hono advisories through @modelcontextprotocol/ext-apps. The plugin's MCP server is a custom stdio implementation and does not import or exercise the affected Hono server, CORS, static-file, body-limit, or Lambda adapter paths. The lockfile is intentionally unchanged to preserve the exact requested 0.2.6 snapshot.

[isma-oai]

LGTM for Sales