Optimize plugin token usage (v1.2.0)

[quintonwall]

Summary

Reduces the context-window tokens the plugin consumes in users' Claude Code sessions. Full analysis and savings estimates are in token-optimization-findings.md (added in this PR).

• Progressive disclosure for the two largest skills — postman-context (19KB → 7.7KB) and generate-spec (10.6KB → 7.2KB) now keep the workflow in SKILL.md and defer detailed rules to references/*.md files read only at the step that needs them. No content deleted, just deferred (~2,800 / ~840 tokens saved per trigger in common cases).
• Removed the manual routing skill — Claude routes natively from component descriptions; the routing table fired on "user mentions APIs" and cost ~835 tokens in nearly every API-codebase session.
• Trimmed always-on front-matter descriptions to one or two sentences (~155 tokens saved in every session, every user).
• Scoped allowed-tools from the mcp__postman__* wildcard to explicit tool lists on all MCP commands and the readiness-analyzer agent. The audit also fixed missing Write/Edit permissions in docs, security, and the agent.
• Async polling guidance — sync, mock, and docs now poll 202 operations with increasing backoff and report only the final result.
• MCP mode escape hatch — the .mcp.json URL now supports a POSTMAN_MCP_MODE env var (mcp full/default, minimal, code). Full mode stays the default: we verified from the server source that minimal mode lacks the *Context tools, async polling tools, createCollectionFolder, and publishDocumentation, which would break core workflows.
• Docs refresh — OAuth-first Quick Start, removed out-of-date GIFs, updated CLAUDE.md conventions. Version bumped to 1.2.0.

Test plan

• claude --plugin-dir . loads the plugin with no manifest errors
• /postman:setup works (OAuth and API key paths)
• Natural-language routing still reaches the right commands without the routing skill (e.g. "sync my collection", "is my API agent-ready?")
• postman-context flow reads references/code-generation.md before generating client code
• A scoped command (e.g. /postman:sync) completes a full workflow with its explicit allowed-tools list
• POSTMAN_MCP_MODE=code connects to the code-mode server

Generated with Claude Code