Activates one immutable plugin installation for one run.

Adapter activation, calls and cleanup run in owned supervised workers. A close seals admission and retains one bounded cleanup attempt for every activation. Unconfirmed cleanup keeps the Session inspectable; only confirmed stop retires its coordinator. Reports are process-local evidence, not crash recovery.