feat: add local 1Password shell plugin support

[Leechael]

Summary

• Add a local 1Password shell plugin module for roam-cli
• Add roam-cli onepassword install to copy the local plugin binary
• Add plugin build/test Makefile targets, docs, and release bundling

Test Results

• make ci passed
• make op-plugin-build passed
• prek run --all-files passed

Test Coverage

• Plugin schema, credential mapping, importer, and needs-auth behavior covered
• Main install command error paths, copy behavior, force overwrite, output, and permissions covered

Review Findings

• No blocking issues found

Test Plan

• All tests pass
• Coverage audit complete
• Pre-ship review clean

---

Summary by cubic

Adds local 1Password shell plugin support for roam-cli so users can auto-inject credentials via op without managing .env files. Includes a new install command, plugin module, tests, docs (with env-var and shell plugin paths), and release bundling of both binaries.

• New Features

  • Local plugin at contrib/1password-plugin (builds roamresearch) with credential mapping and executable schema; ignores help/version/completion for auth.
  • New roam-cli onepassword install (flags: --from, --force) to copy the plugin to ~/.op/plugins/local/roamresearch, set secure dir perms (700) and binary perms (755), and print next steps.
  • Makefile targets: op-plugin-test, op-plugin-build, op-plugin-install-local; root ci runs plugin tests.
  • Release archives now include both roam-cli and roamresearch; workflow builds and tars both together.
  • Docs: README adds two paths (Path A: op run with env vars; Path B: shell plugin), a manual wrapper option, and a new “configuration” help topic shown in CLI help.

• Migration

  • Prereqs: Install 1Password CLI (op).
  • Steps: roam-cli onepassword install → op plugin init roam-cli → source ~/.config/op/plugins.sh → run roam-cli.
  • Dev: make op-plugin-build then roam-cli onepassword install --from ./bin/roamresearch --force.

^{Written for commit 8a780fe. Summary will update on new commits.}

[cubic-dev-ai]

5 issues found across 18 files

<sub>Reply with feedback, questions, or to request a fix.

Re-trigger cubic</sub>