That's useful to note the CC VM won't help (plus didn't want to explain $ to boss!). Except for some surprising versions on the built-in plugins, I think this should match for my current attempt (Community 3.4.9):
-rw-rw-r-- 1 ubuntu ubuntu 9.8M Oct 15 16:41 apoc-184.108.40.206-all.jar
-rw-rw-r-- 1 ubuntu ubuntu 1.2M Oct 15 16:41 graph-algorithms-algo-220.127.116.11.jar
-rw-r--r-- 1 jiropole jiropole 14M Oct 31 14:14 graphaware-server-community-all-18.104.22.168.jar
-rw-r--r-- 1 jiropole jiropole 27K Oct 31 14:14 graphaware-uuid-22.214.171.124.17.jar
I'm going to go back and re-repeat the whole thing with enterprise, to see if I missed any steps the first time around.
Edit: oh, and I think this exercise answers my question: If I set those two new plugins executable, I no longer get the "root resource" error. Maybe my day is looking up!