feat: phase 3 - field-level permissions with plugin field definitions, service-layer filtering, 20 core field definitions

app/plugins/base.py

@@ -82,6 +82,15 @@ class BasePlugin(ABC):
         """
         return []
 
+    # ─── Field Definitions ───
+
+    def get_field_definitions(self) -> list[dict[str, str]]:
+        """Return field definitions from manifest."""
+        return [
+            {"module": fd.module, "field": fd.field, "label": fd.label, "sensitivity": fd.sensitivity}
+            for fd in self.manifest.field_definitions
+        ]
+
     # ─── Route Registration ───
 
     def get_routes(self) -> list[APIRouter]: