Gate finding (PL1 r1 2c/reuse/quality, High): rearm_failed_platform matched
any platform LoadedPlugin with an error and enabled=False. _gate_manifest
writes that same shape for its placeholders (disabled via config, not
enabled in config, removed from the catalog, legacy Relay refusal), and
the requires_hermes gate does too. The reconnect watcher therefore
imported plugins the user or the catalog had deliberately blocked.
The re-arm now re-runs gate_manifest against the current config and only
proceeds when the verdict is still defer/load, and it skips a
requires_hermes mismatch. The registry-snapshot alternative
(snapshot_registration showing a consumed loader) was probed and rejected:
a genuinely failed deferred load disposes its lease, so the snapshot shows
no loader (it would never re-arm the headline case), while a requires_hermes
skip leaves one behind (it would match the wrong case).