core/config: top-level [plugins] enable/disable allowlist

doc/plyngent.example.toml

@@ -10,6 +10,15 @@
 # url = "/path/to/chat.db"
 # # url = ":memory:"
 
+# Third-party plugins (entry-point names). Default: load none.
+# Today the CLI loads allowlisted ``plyngent.tools`` entry points; the section is
+# not tool-specific so other extension points can share the same allowlist later.
+# See doc/plugins.md.
+# [plugins]
+# enable = ["acme"]
+# enable = ["*"]
+# disable = ["legacy"]
+
 [agent]
 # Persona (omit → built-in coding-agent line). tool_directives is the tool playbook.
 # Override with multi-line literals (prefer ''' so nested " is fine):
@@ -38,12 +47,6 @@ max_context_tokens = 200000
 # compact_user_prefix = "Summarize the following conversation:\n\n{transcript}"
 # compact_seed_text = "Compacted from {src}:\n\n{summary}\n\nCarry on."
 
-# Third-party tools (entry-point group plyngent.tools). Default: load none.
-# See doc/plugins.md.
-# tool_plugins = ["acme"]
-# tool_plugins = ["*"]
-# tool_plugins_disable = ["legacy"]
-
 # --- OpenAI-compatible (vLLM, LiteLLM, OpenAI, …) ---
 [providers.openai_compat]
 preset = "openai-compatible"