feat(ecosystem): discover, import, and use Codex pets

[kev1n77]

Summary

Add Codex pet discovery and reviewed import to the ecosystem compatibility page.

• Discover custom pet packages and built-in pets from the installed Codex application.
• Show previews, source information, import status, and source or copy changes.
• Import independent OpenBitFun copies and select them as the active companion.
• Reconcile native imports and deletions with the compatibility list.
• Add English, Simplified Chinese, and Traditional Chinese copy.

Type and Areas

Type: Feature / UI/UX

Areas: Web UI, desktop/Tauri, Codex adapter, Rust services

Motivation / Impact

Codex pets previously lacked a discovery and import workflow in the compatibility page.

Users can now preview available pets, confirm an import, and activate the imported companion through existing OpenBitFun settings. Imports preserve the external source and reject content that changed after review.

Verification

Added automated coverage for:

• Package versions, legacy payloads, invalid resources, and stale import reviews.
• Idempotent and concurrent imports, edited copies, source changes, and native deletion.
• Bundled asset discovery, stable identities across application updates, and malformed bundles.
• Host capability checks, reviewed import requests, and UI state synchronization.

Focused verification commands:

• cargo test -p openbitfun-services-core --no-default-features --features pet-packages --lib pet_packages
• cargo test -p openbitfun-services-core --no-default-features --features asar --lib asar
• cargo test -p openbitfun-codex-adapter --lib pet_source
• pnpm --dir src/web-ui run test:run src/app/scenes/ecosystem-compatibility src/infrastructure/config/services/AgentCompanionPetService.test.ts
• pnpm run check:web
• pnpm run i18n:audit
• pnpm run check:core-boundaries

These commands were not executed while preparing this PR description; current pass/fail results remain unverified here.

Reviewer Notes

• Shared package validation and import behavior live in services; Codex-specific discovery stays in the adapter.
• Application bundles are inspected statically without executing their JavaScript.
• Bundled imports require explicit host capability support and a reviewed fingerprint.
• Existing package requests remain compatible, and older hosts supporting custom imports retain that path.
• Unsupported environments remain gated. Real remote and cross-platform end-to-end behavior was not verified here.

Checklist

• This PR is focused and does not include secrets, temporary prompts, generated scratch files, or unrelated artifacts.
• Relevant verification is recorded above, or skipped checks are explained.
• User-facing strings, docs, and locales are updated where applicable.