feat(plugins): plugin system with extension points, consent, Wasm runtime and plugin API 1.0 (#971)

A plugin system built on WebAssembly components (wasmtime, WASI p2), with a
typed WIT API (`openidea:[email protected]`) and a Rust SDK, shipped as a preview.

- Extension points declared in `plugin.toml` (commands, languages, themes,
  icon themes, menus, key bindings, status items, settings, views, custom
  editors, file icons and templates, run detectors, editor providers),
  validated before anything takes effect and projected onto the workbench's
  own registries: plugin themes and file icon themes are chosen in
  Settings › Appearance and Quick Switch, plugin shortcuts are edited in
  Settings › Keymap, plugin problems are grouped in Settings › Inspections.
- Capabilities with risk levels and consent at install, pinned `process:`
  programs, secrets in the OS keychain.
- Runtime: one thread per active plugin, fuel/time/memory budgets, soft and
  hard deadlines on the editing path, cancellation, crash backoff, idle
  reclaim, a precompiled-component cache; remote projects run code plugins on
  `openidea-server`.
- Web views and custom editors with a sandboxed page, a document bridge
  joined to the text editor's undo history, and split or preview layouts.
- Distribution: signed `.oiplugin` packages, a static marketplace index with
  revocation, versioned installs with rollback, install from a `.zip` or a
  folder. The release workflow signs and publishes the official plugins and
  their index, which released builds use as the default marketplace.
- Official plugins: String Tools, Key Promoter, Git Toolbox, AI Completion,
  Checkstyle, MyBatis Navigator, CSV Editor, Solidity, Material Icons, Harbor
  Night, Excalidraw, Graphviz, Regex Tester, License Header.

Closes #732

Co-authored-by: Deng Liu <[email protected]>
Co-authored-by: florentvdry <[email protected]>

src/features/plugins/PluginsPage.module.css

@@ -198,11 +198,13 @@
 .header {
   display: flex;
   align-items: flex-start;
+  /* In a narrow window the actions go below rather than over the name. */
+  flex-wrap: wrap;
   gap: 14px;
 }
 .headerText {
   display: flex;
-  flex: 1;
+  flex: 1 1 160px;
   flex-direction: column;
   gap: 2px;
   min-width: 0;
@@ -222,6 +224,11 @@
   flex-wrap: wrap;
   gap: 8px;
 }
+/* Badges are counter pills (`min-width: 16px`): in a narrow window they wrap instead of shrinking under their text. */
+.titleLine > * {
+  flex: none;
+  white-space: nowrap;
+}
 .title {
   margin: 0;
   color: var(--fg-strong);
@@ -313,3 +320,67 @@
   text-overflow: ellipsis;
   white-space: nowrap;
 }
+
+/* Permission dialog and notices */
+.consent {
+  display: flex;
+  flex-direction: column;
+  gap: 10px;
+  min-width: 0;
+}
+
+.consentWarning {
+  margin: 0;
+  color: var(--fg-warning, var(--fg));
+}
+
+.consentRequired {
+  width: 16px;
+  text-align: center;
+  color: var(--fg-muted);
+}
+
+.consentNotice {
+  display: flex;
+  align-items: center;
+  gap: 12px;
+  justify-content: space-between;
+  padding: 8px 10px;
+  border: 1px solid var(--border);
+  border-radius: 6px;
+  margin-bottom: 12px;
+}
+
+.settingsPage {
+  display: flex;
+  flex-direction: column;
+  gap: 12px;
+  max-width: 560px;
+}
+
+.settingRow {
+  display: flex;
+  flex-direction: column;
+  gap: 4px;
+}
+
+.marketItem {
+  list-style: none;
+  padding: 4px 8px;
+}
+
+.marketBar {
+  display: flex;
+  gap: 4px;
+  align-items: center;
+}
+
+.marketBar > :first-child {
+  flex: 1;
+  min-width: 0;
+}
+
+.marketOverview {
+  padding: 12px 16px;
+  overflow: auto;
+}