fix(pengu): keep Classic Mod entrypoints disabled

Prevent the frozen runtime sync from restoring ROSE-ClassicMods or ROSE-ClassicSkinSelector from an enabled state left by a development build. The bundled index.js_ entrypoints now remain authoritative on main, and the existing sanitizer parks any stale index.js copy.

Validation:
- 31 existing tests passed.
- Simulated an enabled Classic Mod runtime followed by the main overlay; the stale index.js was parked and index.js_ remained active.
- Confirmed an ordinary plugin still preserves its user-selected enabled state.
- Python compilation and git diff --check passed.

Review notes:
- Classic Mod source files remain bundled for source consistency but are not loaded.
- Regular CustomWheel and all unrelated plugin enable/disable choices are unchanged.
- Re-enabling the experimental Classic Mod components later requires removing this main-only denylist together with renaming their entrypoints.

Author: ccccxp

utils/integration/pengu_loader.py

@@ -44,6 +44,10 @@
 _PLUGIN_ENTRYPOINT = "index.js"
 _PLUGIN_ENTRYPOINT_DISABLED = "index.js_"
 _PLUGIN_ENTRYPOINT_BUNDLED_BACKUP = "index.js.bundled"
+_BUNDLED_DISABLED_CLASSIC_MOD_PLUGINS = {
+    "ROSE-ClassicMods",
+    "ROSE-ClassicSkinSelector",
+}
 
 
 def _remove_legacy_pengu_logs(pengu_dir: Path) -> None:
@@ -169,7 +173,9 @@ def _restore_plugin_enable_state(pengu_dir: Path, enabled: set[str], disabled: s
 
         # If the user had a plugin enabled, prefer enabled state: remove any
         # reintroduced `index.js_` from the bundle.
-        for plugin_name in enabled:
+        # These experimental Classic Mod entrypoints ship disabled on main;
+        # do not revive an enabled copy left behind by a development build.
+        for plugin_name in enabled - _BUNDLED_DISABLED_CLASSIC_MOD_PLUGINS:
             plugin_dir = plugins_dir / plugin_name
             if not plugin_dir.is_dir():
                 continue