feat(plugin): AEGIS scan-pipe on all inbound Pilot messages

[TeoSlayer]

Summary

• Scans every inbound Pilot message (text and media captions) through aegis scan-pipe before dispatching to the agent
• Malicious messages (prompt injection, jailbreak, persona hijack, exfil scaffolding) are dropped with a warning log — never reach the LLM turn
• 500ms timeout: AEGIS L1 is microseconds in practice; timeout is safety net only

How it works

Peer sends message
  → allowlist / HMAC auth (existing)
  → AEGIS scan-pipe (new, L1 pattern check, ~microseconds)
    exit 0 → dispatch to agent (existing)
    exit 2 → drop + warn, never reaches agent

Test plan

• Clean message dispatches normally
• Message containing "ignore previous instructions" is blocked with warning log
• Message containing credential exfil patterns is blocked
• Timeout (aegis not installed) fails open — message passes through

🤖 Generated with Claude Code

[codecov]

Codecov Report

❌ Patch coverage is 53.33333% with 14 lines in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
plugin/src/inbound.ts	53.33%	14 Missing ⚠️

📢 Thoughts on this report? Let us know!