feat(plugins): plugin system with extension points, consent, Wasm runtime and plugin API 1.0 (#971)

A plugin system built on WebAssembly components (wasmtime, WASI p2), with a
typed WIT API (`openidea:plugin@1.0.0`) and a Rust SDK, shipped as a preview.

- Extension points declared in `plugin.toml` (commands, languages, themes,
  icon themes, menus, key bindings, status items, settings, views, custom
  editors, file icons and templates, run detectors, editor providers),
  validated before anything takes effect and projected onto the workbench's
  own registries: plugin themes and file icon themes are chosen in
  Settings › Appearance and Quick Switch, plugin shortcuts are edited in
  Settings › Keymap, plugin problems are grouped in Settings › Inspections.
- Capabilities with risk levels and consent at install, pinned `process:`
  programs, secrets in the OS keychain.
- Runtime: one thread per active plugin, fuel/time/memory budgets, soft and
  hard deadlines on the editing path, cancellation, crash backoff, idle
  reclaim, a precompiled-component cache; remote projects run code plugins on
  `openidea-server`.
- Web views and custom editors with a sandboxed page, a document bridge
  joined to the text editor's undo history, and split or preview layouts.
- Distribution: signed `.oiplugin` packages, a static marketplace index with
  revocation, versioned installs with rollback, install from a `.zip` or a
  folder. The release workflow signs and publishes the official plugins and
  their index, which released builds use as the default marketplace.
- Official plugins: String Tools, Key Promoter, Git Toolbox, AI Completion,
  Checkstyle, MyBatis Navigator, CSV Editor, Solidity, Material Icons, Harbor
  Night, Excalidraw, Graphviz, Regex Tester, License Header.

Closes #732

Co-authored-by: Deng Liu <5108773+dengliu@users.noreply.github.com>
Co-authored-by: florentvdry <16673235+florentvdry@users.noreply.github.com>

scripts/theme/theme.test.ts

@@ -14,7 +14,8 @@ const read = (p: string) => readFileSync(p, "utf8");
 const css = read("src/styles/tokens.css");
 const groups = themeTokenGroups(css);
 const sets = tokenSets(groups);
-const TEMPLATE = "templates/theme-plugin";
+// The official Harbor Night theme, where new themes start (`openidea-plugin new --template theme`).
+const TEMPLATE = "plugins/official/harbor-night";
 const themeSrc = read(`${TEMPLATE}/themes/harbor-night.theme.json`);
 const schemeSrc = read(`${TEMPLATE}/themes/harbor-night.scheme.json`);
 const theme = JSON.parse(stripJsonComments(themeSrc)) as { id: string; kind: string; tokens: Record<string, string> };
@@ -47,7 +48,7 @@ describe("theme token reference", () => {
 describe("theme plugin template", () => {
   it("sets every UI token in the theme file and every editor token in the scheme file", () => {
     // A failure here means tokens.css gained (or lost) a themeable token:
-    // add it to templates/theme-plugin/themes/*.json, then run pnpm gen:theme-docs.
+    // add it to plugins/official/harbor-night/themes/*.json, then run pnpm gen:theme-docs.
     expect(sorted(Object.keys(theme.tokens))).toEqual(sorted(sets.ui));
     expect(sorted(Object.keys(scheme.tokens))).toEqual(sorted(sets.scheme));
   });