Move reference plugin to examples/scheduling-plugin; plugins/ ships empty as a drop-in mount point, e2e bind-mounts the example

e2e-tests/compose.full.yml

@@ -28,6 +28,16 @@ services:
       interval: 2s
       timeout: 4s
       retries: 30
+    # plugins/ is empty in the image; bind the reference example in as the `scheduling` plugin so the
+    # browser flow can open its gated /scheduling/shifts page.
+    volumes:
+      - ./examples/scheduling-plugin:/app/plugins/scheduling:ro
+
+  # bootstrap grants the demo admin every discovered plugin's permission tokens, so it needs the
+  # reference plugin present too — else the admin lacks scheduling:read/write and the gated page 403s.
+  bootstrap:
+    volumes:
+      - ./examples/scheduling-plugin:/app/plugins/scheduling:ro
 
   # Browser-facing URLs (base_url, every ui_url, the after-login redirect) move to the gateway host.
   # `--dev`: the browser hits the gateway over http, but Kratos marks cookies Secure for a

e2e-tests/compose.visual.yml

@@ -20,6 +20,10 @@ services:
       interval: 2s
       timeout: 4s
       retries: 15
+    # plugins/ is empty in the image; bind the reference example in as the `scheduling` plugin so the
+    # nav-gating spec has a drop-in plugin to assert against.
+    volumes:
+      - ./examples/scheduling-plugin:/app/plugins/scheduling:ro
 
   e2e:
     build: