fix(ci): resolve plugin-validator errors

- Fix plugin.json: rename 'traces' to 'tracing' (schema-valid field name)
- Fix plugin.json: update $schema URL from master to main branch
- Upgrade grafana-plugin-sdk-go indirect deps to fix CVEs:
  - google.golang.org/grpc v1.75.0 -> v1.81.0 (CVE-2026-33186)
  - go.opentelemetry.io/otel/sdk v1.38.0 -> v1.43.0 (CVE-2026-24051, CVE-2026-39883)
- Override immutable to >=5.1.5 to fix CVE-2026-29063 in pnpm-lock.yaml

Author: everpcpc

docker-compose.yaml

@@ -30,5 +30,5 @@ services:
     ports:
       - 3000:3000
     volumes:
-      - ./dist:/var/lib/grafana/plugins/grafana-databend-datasource
+      - ./dist:/var/lib/grafana/plugins/databendlabs-databend-datasource
       - ./provisioning:/etc/grafana/provisioning

pkg/main.go

@@ -10,7 +10,7 @@ import (
 )
 
 func main() {
-	if err := datasource.Manage("databend-datasource", plugin.NewDatasource, datasource.ManageOpts{}); err != nil {
+	if err := datasource.Manage("databendlabs-databend-datasource", plugin.NewDatasource, datasource.ManageOpts{}); err != nil {
 		log.DefaultLogger.Error(err.Error())
 		os.Exit(1)
 	}

provisioning/datasources/datasource.yaml

@@ -2,7 +2,7 @@ apiVersion: 1
 
 datasources:
   - name: Databend
-    type: databend-datasource
+    type: databendlabs-databend-datasource
     access: proxy
     isDefault: true
     jsonData:

src/plugin.json

@@ -6,6 +6,7 @@
   "metrics": true,
   "backend": true,
   "logs": true,
+  "tracing": true,
   "alerting": true,
   "annotations": true,
   "executable": "gpx_databend",