feat(forge): pluggable forge abstraction + GitLab and Gitea/Forgejo/Codeberg (#1913)

* refactor(forge): forge-neutral foundation (GitHub-only)

Decouple git-hosting from GitHub behind a neutral abstraction (issue #1616), GitHub-only for now; existing GitHub behaviour is unchanged.

- Forge manifest, neutral ForgeService contract, forge registry + resolver, and a client forge-module registry.
- GitHub code renamed to the neutral shape; PR/Issue attachment wording preserved.
- forge.search.response enums parse tolerantly (unknown kind/auth state degrade instead of breaking the client).
- createPullRequest reports typed CLI/auth errors instead of a generic message.
- forge-resolver host/remote caches are LRU-bounded.
- Forge host trust is explicit: only a known cloud host or a CLI-authenticated host is ever talked to; an unauthenticated GitHub Enterprise host fails resolution instead of routing to github.com.
- Docs: forge-providers guide, glossary and i18n forge-copy conventions, architecture and rpc-namespacing terminology.
- Vitest React Native mocks (unistyles, svg, linking, lucide) consolidated into shared aliased test-stubs.

* feat(forge): GitLab adapter, forge-aware UI, pipelines and approvals

GitLab adapter over the glab CLI on the neutral contracts: MR status, forge-aware UI, pipeline tree, and N-of-M approvals.

- threadIsResolved is part of the neutral timeline item.
- Pipeline load failures show an error instead of an empty section.
- Manual pipeline jobs render as pending.
- Fork/detached MR head pipelines are fetched by MR iid (glab ci get --merge-request).

* feat(forge): Gitea family adapter (Gitea, Forgejo, Codeberg)

One adapter over the tea CLI serving Gitea, Forgejo, and Codeberg on the neutral contracts.

- CI status aggregates commit statuses and Actions runs together.
- Gitea's terminal "warning" state maps to failure on server and client.
- Gitea Actions check details are reachable from the PR pane by workflowRunId.

* refactor(forge): localize compatibility handling

* test(forge): expect normalized GitLab facts

---------

Co-authored-by: Mohamed Boudra <boudra.moha@gmail.com>

packages/app/src/git/pr-status.test.ts

@@ -0,0 +1,40 @@
+import { describe, expect, it } from "vitest";
+import type { CheckoutPrStatusResponse } from "@getpaseo/protocol/messages";
+import { normalizeCheckoutPrStatusPayload } from "./pr-status";
+
+function payload(
+  overrides: Partial<CheckoutPrStatusResponse["payload"]> = {},
+): CheckoutPrStatusResponse["payload"] {
+  return {
+    cwd: "/repo",
+    status: null,
+    githubFeaturesEnabled: true,
+    forge: "github",
+    error: null,
+    requestId: "pr-status-1",
+    ...overrides,
+  };
+}
+
+describe("normalizeCheckoutPrStatusPayload", () => {
+  it("preserves known auth states", () => {
+    expect(normalizeCheckoutPrStatusPayload(payload({ authState: "cli_missing" })).authState).toBe(
+      "cli_missing",
+    );
+  });
+
+  it("derives auth from the legacy feature flag when authState is absent", () => {
+    expect(normalizeCheckoutPrStatusPayload(payload()).authState).toBe("authenticated");
+    expect(
+      normalizeCheckoutPrStatusPayload(payload({ githubFeaturesEnabled: false })).authState,
+    ).toBe("unauthenticated");
+  });
+
+  it("does not expose an unknown wire auth state to feature code", () => {
+    expect(
+      normalizeCheckoutPrStatusPayload(
+        payload({ authState: "future_auth_state", githubFeaturesEnabled: false }),
+      ).authState,
+    ).toBe("unauthenticated");
+  });
+});