feat: add plugin schema

[fzipi]

what

• add plugin schema for discovery and configuration

why

• enhance plugin onboarding experience

[Copilot]

Pull request overview

Adds a JSON Schema and accompanying documentation/examples to standardize CRS plugin discovery and configuration via a plugin.yaml descriptor.

Changes:

• Introduce plugin-schema.json (JSON Schema draft 2020-12) for validating plugin descriptors.
• Add documentation describing the schema fields and intended usage (docs/plugin-descriptor-schema.md).
• Provide example plugin descriptors under examples/ for reference and onboarding.

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 7 comments.

Show a summary per file

File	Description
plugin-schema.json	Defines the structure/constraints for plugin.yaml plugin descriptors.
docs/plugin-descriptor-schema.md	Documents the schema fields, intent, and rollout plan.
examples/wordpress-rule-exclusions-plugin.yaml	Example descriptor for a rule-exclusion plugin.
examples/fake-bot-plugin.yaml	Example descriptor for a detection plugin with multiple variables.
examples/body-decompress-plugin.yaml	Example descriptor for a utility plugin with numeric bounds.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[fzipi]

@copilot apply changes based on the comments in this thread

[Copilot]

@copilot apply changes based on the comments in this thread

Applied all changes from the review in commit bc82781:

• configuration.variables: added minItems: 1 to prevent empty variable lists
• default/example type validation: added if/then conditionals for all four types — boolean values must be integer 0 or 1; integer values must be integers; string and enum values must be strings
• allowed_values: added items: {type: string} and a conditional requiring it when type is "enum", and forbidding it for non-enum types
• min/max: changed from type: number to type: integer and added a conditional that forbids them on non-integer variable types
• Example fix: renamed tx.body-decompress-plugin_enable → tx.body-decompress-plugin_enabled to match the documented convention
• Docs: updated the boolean type description to clarify values are integers (0/1) following the ModSecurity convention