[bug] Plugin scanner fails with `spawn git ENOENT` — git missing in worker

[fengyat]

What happened

When I submit a plugin via https://cursor.directory/plugins/new, the auto-detect (Scan repo) step succeeds, but the security agent then fails the scan with:

Could not clone https://github.com/Continuum-AI-Corp/orcarouter-mcp-server: spawn git ENOENT. Manual review required.
• repository_clone_failed

spawn git ENOENT is Node's child_process.spawn error code for "the git binary isn't on PATH" — i.e. the scanner worker doesn't have git installed.

Reproduction

1. Submit https://github.com/Continuum-AI-Corp/orcarouter-mcp-server (public, has a root .mcp.json)
2. Scan repo succeeds and pre-fills the form
3. After Submit for Review, the plugin page loads with Flagged by the security agent ... spawn git ENOENT
4. Edit your plugin → resubmit reproduces the same error (not transient)

The repo clones without issue from any other environment.

Affected listing

• https://cursor.directory/plugins/orcarouter (currently hidden pending manual review)