feat(forge): pluggable forge abstraction + GitLab and Gitea/Forgejo/Codeberg (#1913)

* refactor(forge): forge-neutral foundation (GitHub-only)

Decouple git-hosting from GitHub behind a neutral abstraction (issue #1616), GitHub-only for now; existing GitHub behaviour is unchanged.

- Forge manifest, neutral ForgeService contract, forge registry + resolver, and a client forge-module registry.
- GitHub code renamed to the neutral shape; PR/Issue attachment wording preserved.
- forge.search.response enums parse tolerantly (unknown kind/auth state degrade instead of breaking the client).
- createPullRequest reports typed CLI/auth errors instead of a generic message.
- forge-resolver host/remote caches are LRU-bounded.
- Forge host trust is explicit: only a known cloud host or a CLI-authenticated host is ever talked to; an unauthenticated GitHub Enterprise host fails resolution instead of routing to github.com.
- Docs: forge-providers guide, glossary and i18n forge-copy conventions, architecture and rpc-namespacing terminology.
- Vitest React Native mocks (unistyles, svg, linking, lucide) consolidated into shared aliased test-stubs.

* feat(forge): GitLab adapter, forge-aware UI, pipelines and approvals

GitLab adapter over the glab CLI on the neutral contracts: MR status, forge-aware UI, pipeline tree, and N-of-M approvals.

- threadIsResolved is part of the neutral timeline item.
- Pipeline load failures show an error instead of an empty section.
- Manual pipeline jobs render as pending.
- Fork/detached MR head pipelines are fetched by MR iid (glab ci get --merge-request).

* feat(forge): Gitea family adapter (Gitea, Forgejo, Codeberg)

One adapter over the tea CLI serving Gitea, Forgejo, and Codeberg on the neutral contracts.

- CI status aggregates commit statuses and Actions runs together.
- Gitea's terminal "warning" state maps to failure on server and client.
- Gitea Actions check details are reachable from the PR pane by workflowRunId.

* refactor(forge): localize compatibility handling

* test(forge): expect normalized GitLab facts

---------

Co-authored-by: Mohamed Boudra <boudra.moha@gmail.com>

packages/server/src/utils/ssh-hostname.ts

@@ -0,0 +1,68 @@
+import { normalizeHost } from "@getpaseo/protocol/git-remote";
+import { findExecutable } from "../executable-resolution/executable-resolution.js";
+import { execCommand } from "./spawn.js";
+
+export type SshHostnameResolver = (host: string) => Promise<string | null>;
+
+const SSH_HOSTNAME_RESOLVE_TIMEOUT_MS = 5_000;
+
+let sshExecutableLookup: Promise<string | null> | null = null;
+const sshHostnameResolutionCache = new Map<string, Promise<string | null>>();
+
+/**
+ * Resolve an SSH host alias (e.g. `github-work` from ~/.ssh/config) to its
+ * configured HostName via `ssh -G`. Results are cached for the daemon's
+ * lifetime; a host that isn't an alias resolves to itself.
+ */
+export async function resolveSshHostname(host: string): Promise<string | null> {
+  const normalized = normalizeHost(host);
+  if (!normalized) {
+    return null;
+  }
+
+  const cached = sshHostnameResolutionCache.get(normalized);
+  if (cached) {
+    return cached;
+  }
+
+  const resolution = runSshHostnameLookup(normalized);
+  sshHostnameResolutionCache.set(normalized, resolution);
+  return resolution;
+}
+
+async function runSshHostnameLookup(host: string): Promise<string | null> {
+  sshExecutableLookup ??= findExecutable("ssh");
+  const sshPath = await sshExecutableLookup;
+  if (!sshPath) {
+    return null;
+  }
+
+  try {
+    const { stdout } = await execCommand(sshPath, ["-G", host], {
+      env: { ...process.env, GIT_TERMINAL_PROMPT: "0" },
+      maxBuffer: 1024 * 1024,
+      timeout: SSH_HOSTNAME_RESOLVE_TIMEOUT_MS,
+    });
+    return parseSshHostname(stdout);
+  } catch {
+    return null;
+  }
+}
+
+function parseSshHostname(stdout: string): string | null {
+  for (const line of stdout.split(/\r?\n/u)) {
+    const trimmed = line.trim();
+    if (!trimmed) {
+      continue;
+    }
+    const [key, value] = trimmed.split(/\s+/u);
+    if (key?.toLowerCase() !== "hostname") {
+      continue;
+    }
+    const normalized = normalizeHost(value ?? "");
+    if (normalized) {
+      return normalized;
+    }
+  }
+  return null;
+}