Verify a published plugin

Paste a GitHub repository URL and we'll fetch the tarball, parse the plugin spec, and run it through the same validation ruleset the builder uses. No auth required.