feat(kiosk): resolve constant plugin IDs, overrides and the CheckT helper

- kiosk.ReadIdentity: ID()/Requires() as literals or constants across packages and modules, read with go/parser, never run
- plugin minimums from go.mod requires; v0.0.0 is an error, a pseudo-version warns
- kiosk.Validate, kiosk.CheckT (no testing import)
- plugin:add reads IDs through kiosk.ReadIdentity, so const-ID plugins register

modules/kiosk/testdata/framework/go.mod

@@ -0,0 +1,5 @@
+// A stub of the framework module: fixture go.mod files replace the
+// framework with this directory, so go list runs offline.
+module git.golem15.com/golem15/summercms
+
+go 1.27.0