Plugins are managed in the build bom.  Is that not sufficient?  We could manage the plugin dependencies of the bom with the build-bom.