feat(seedance): harden marketplace readiness

[acedatacloud-dev]

Why

The Seedance plugin needed an auditable synchronous reviewer path, accurate media/privacy boundaries, safe packaging, and fail-closed credential/error behavior before any marketplace handoff.

What

• document capabilities, fixed endpoint, billable reviewer check, support, and async/callback limits
• replace generic privacy text with the actual plugin data flow and retention boundary
• exclude tests and .env.* files from plugin packages
• reject empty/bare Bearer credentials and redact the configured token from returned errors
• add marketplace-readiness and security regression tests

Evidence

• PYTHONPATH=$PWD/plugins/seedance python3 -m pytest -q plugins/seedance/tests (10 passed)
• ruff check and ruff format --check on changed Python files
• git diff --check
• staged secret/internal-sourcing scan passed

External gate

manifest.yaml intentionally remains verified: false. This PR does not submit to or claim approval/publication by Dify Marketplace. A funded reviewer request remains an owner-authorized external step.

🤖 Generated with Claude Code