feat(catalog): add Runa plugin and MCP

- optional-mcps/runa: Runa's hosted, read-only MCP server
  (https://mcp.joinruna.com/mcp, Streamable HTTP, OAuth 2.1 with CIMD
  and DCR).
- plugin-catalog/runa: the Runa portable plugin (plugin.json, mcp.json,
  four skills) pinned at Runa-Labs-Inc/runa-hermes-plugin@fd663db5.

optional-mcps/runa/manifest.yaml

@@ -0,0 +1,36 @@
+# Nous-approved MCP catalog entry.
+# Presence in this directory = approval. Merged via PR review.
+manifest_version: 1
+
+name: runa
+description: >-
+  Meetings, transcripts, and action items from Runa, plus the people and
+  companies you meet with.
+source: https://github.com/Runa-Labs-Inc/runa-hermes-plugin
+
+# Official vendor-hosted remote MCP (URL-only — Hermes never spawns a local
+# process for this entry), read-only. Native OAuth 2.1 (verified live: RFC 9728
+# protected-resource metadata -> AS metadata with
+# client_id_metadata_document_supported and a registration_endpoint), so
+# Hermes's Client ID Metadata Document signs in with no client to register.
+# Hermes's MCP client + mcp_oauth_manager handle discovery, PKCE, token
+# exchange, and refresh.
+transport:
+  type: http
+  url: https://mcp.joinruna.com/mcp
+
+auth:
+  type: oauth
+
+# Composer-suggestion triggers (desktop brand pills).
+suggest:
+  keywords:
+    - runa
+  hosts:
+    - joinruna.com
+
+post_install: |
+  Hermes opens a browser to sign in to Runa with Google or Microsoft; a
+  first sign-in creates your Runa account. If the sign-in times out before
+  you finish, run `hermes mcp login runa`, which waits five minutes. Then
+  start a new session so the tools load.

plugin-catalog/runa.yaml

@@ -0,0 +1,31 @@
+name: runa
+title: Runa
+repo: https://github.com/Runa-Labs-Inc/runa-hermes-plugin
+sha: fd663db532caf61a9fa553a4e5f4855aefd06e22
+description: >-
+  Bring your Runa meetings into Hermes: prep for what's next, recap decisions and who owes what,
+  draft the follow-up, and find the exact words behind a claim, through Runa's hosted MCP server
+  (Streamable HTTP, OAuth 2.1), with four workflow skills bundled. Portable Agent Plugins v1 package
+  (plugin.json + mcp.json + skills/). Disclosure — hosted-only connector with no local code: every
+  tool call goes to Runa's MCP server at mcp.joinruna.com, signed in as the user through Runa's
+  sign-in (Google or Microsoft), and a first sign-in creates a Runa account. Meeting titles,
+  summaries, transcripts, action items, people and company notes, and reads from apps the user
+  connected to Runa are pulled into the session context, and so reach the user's model provider.
+  No tool changes data in Runa or in those apps; Runa logs each call's metadata. The tool list comes
+  from Runa's server at run time, so the pinned commit doesn't cover it. Hermes stores and refreshes
+  the OAuth tokens. OAuth must be enabled with
+  `hermes mcp add runa --url https://mcp.joinruna.com/mcp --auth oauth --connect-timeout 300`;
+  the bundled mcp.json alone yields 401.
+maintainer: Runa-Labs-Inc
+tier: community
+category: tools
+requires_hermes: ">=0.22.0"
+docs_url: https://github.com/Runa-Labs-Inc/runa-hermes-plugin/blob/fd663db532caf61a9fa553a4e5f4855aefd06e22/README.md
+version: "1.0.0"
+image: https://raw.githubusercontent.com/Runa-Labs-Inc/runa-hermes-plugin/fd663db532caf61a9fa553a4e5f4855aefd06e22/assets/catalog-card.png
+platforms: []
+capabilities:
+  provides_tools: []
+  provides_hooks: []
+  provides_middleware: []
+  requires_env: []