Extensions that pass review first time

Manifests now ask for the narrowest permissions they need instead of broad host access, and hardcoded credential mistakes are caught and rebuilt before you ever see them.