Clarify plugin manifest and telemetry docs

Author: rforgeon

plugins/hanko-auth-integration/README.md

@@ -11,6 +11,10 @@ The plugin does not add a runtime dependency to Hanko. It gives agents a precise
 - Plugin eval cases in `evals/hanko-auth-integration/cases.jsonl`.
 - Privacy-safe measurement guidance for teams that want production plugin metrics.
 
+## Manifest Compatibility
+
+The Codex and Claude manifests use `skills: ./skills/`, which is resolved from the plugin root by the plugin manifest contract. The Codex manifest validates with the local plugin validator used for this contribution.
+
 ## Primary Workflows
 
 - Framework integration plan.
@@ -32,7 +36,7 @@ Use this plugin directory directly from the repository when your harness support
 plugins/hanko-auth-integration
 ```
 
-For Telvine-backed distribution and metrics:
+For Telvine-backed distribution and metrics, the Telvine CLI is published as [`telvine` on npm](https://www.npmjs.com/package/telvine):
 
 ```bash
 npm i -g telvine

plugins/hanko-auth-integration/evals/hanko-auth-integration/README.md

@@ -10,3 +10,5 @@ Each JSONL row contains:
 - `expected.must_include`: concepts the plugin output should cover.
 - `expected.must_not_include`: sensitive data classes the plugin must avoid.
 - `metadata.safe_events`: metadata-only events that can be tracked if a team uses Telvine or another plugin telemetry sink.
+- `metadata.component`: the plugin component or skill under test.
+- `metadata.harnesses`: agent harnesses the plugin is intended to support.

plugins/hanko-auth-integration/skills/hanko-auth-integration/SKILL.md

@@ -45,11 +45,15 @@ Only emit metadata about plugin behavior, such as component name, outcome, durat
 
 ## Optional Telvine Measurement
 
-Teams that publish this plugin through Telvine can measure adoption and eval outcomes without changing Hanko runtime code:
+Teams that publish this plugin through Telvine can measure adoption and eval outcomes without changing Hanko runtime code. The CLI package is published as `telvine` on npm: https://www.npmjs.com/package/telvine
 
 ```bash
 npm i -g telvine
 telvine login
 telvine publish ./plugins/hanko-auth-integration
 telvine plugins metrics
 ```
+
+## Manifest Path Note
+
+The plugin manifests use `skills: ./skills/` because the supported plugin manifest contract resolves that path from the plugin root, not from the hidden manifest directory.