Ensures delegated admins with plugin management permission can access `/plugins/installed` UI and all plugin action endpoints consistently.