release 2.0.9: scope=ninja + api.cal.com egress declaration

Re-declares allowed_hosts (bug: the pre-fix `ninja plugin bump` stripped it
on the 2.0.7->2.0.8 bump, so the published 2.0.8 reached no egress consent
gate and Cal.com calls were denied at runtime). Sets scope=ninja and drops
the stray private flag to match the registry's @ninja/calcomblock entry.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

plugin.mod

@@ -1,11 +1,10 @@
 [plugin]
 name = "calcomblock"
 display_name = "Cal.com Booking"
-scope = ""
+scope = "ninja"
-version = "2.0.7"
+version = "2.0.9"
 description = "Embeddable Cal.com booking calendar block with custom styling, timezone-aware slot windowing, honeypot + captcha + rate-limited public booking endpoints, and webhook receiver."
 kind = "plugin"
 categories = ["forms"]
 tags = ["calcom", "booking", "calendar", "scheduling", "appointments"]
-private = true
 allowed_hosts = ["api.cal.com"]