Roadmap: future only

Nothing here is an implemented API or promise:

third-party distribution, signatures, sandbox, trust and upgrade orchestration;
encrypted per-tenant integration credentials;
plugin-to-plugin dependency/conflict declarations;
tenant-configurable slot placement/priorities;
catch-all/optional plugin page parameters;
disabled dashboard resolution that honors requiresEnabled;
settings migrations/package upgrade hooks;
tenant-aware queued installation seeding;
audited web UI for global lifecycle;
extension telemetry/health/audit;
retroactive guest-donation claiming after a later DonorPhoneVerified event;
more semantic slots and richer tooling/diagnostics.

Already implemented—not roadmap: dynamic public plugin pages, grouped organization and Super Admin submenus, organization and Super Admin widgets, three theme slots, priorities, route collision validation, typed settings, package migrations/purge, preview-aware rendering, Events, and Fundraising workflows. The future audited global lifecycle UI is distinct from current read-only plugin operational pages.

Move an item into Build/Reference only after enums/contracts and tests exist.