fix: prevent concurrent setup initialization

[hardy-dev-infinilabs]

Summary

• ensure setup callbacks only run once even if setup completion is triggered repeatedly
• reject concurrent /setup/_initialize requests while one initialization is already running
• clear the initialization guard when setup exits so later retries can proceed normally

Testing

• go test ./plugin/setup