Resolve one path declared relative to plugin_root.
Plugin manifest component fields must start with ./. Marketplace source
paths must not, because the marketplace format also accepts a bare relative
path such as tools/my-plugin; those callers pass
require_dot_prefix=False. Both forms stay inside plugin_root.
