feat: use host Action for task manager CPU chip

[carlosflorencio]

Release hold: do not merge until a stable Kandev release includes PR #3943 and this package has been validated against that release. Re-pin and revalidate only under the parent coordinator's later instruction.

Change

The Task Manager CPU top-bar trigger uses host-owned ui.Action when available. It shows a decorative CPU icon and live CPU percentage with a localized accessible label and interpolated tooltip. Older supported API v1 hosts retain the existing chip and detailed meter. The mobile legacy path reads props.slotProps.presentation. Plugin id, registration, keybinding, modal, polling, sampling, process attribution, provider behavior, permissions, and platform support remain unchanged.

Conflict resolution against latest main

The PR still targets main, now at 356dd945767979a553660e897676e81f5ad4200c (release 0.1.3). This branch merges that base in commit 0ccbd61563ca5611e39bb7e2349a9da6bdd22fd6; the published PR history was not rewritten.

The resolution preserves main's marketplace archive checksum fix, SDK plugin-pack Go tool declaration and updated dependency checksums, current-platform packaging CI check, and 0.1.3 manifest/Makefile/CHANGELOG metadata. The release checksum step extracts the internal package checksums from the exact version-verified archive and appends that archive's SHA-256.

Compatibility

• SDK source pin: 570600439036e81f8e9e1c63f15c4abce8a6c846 in .kandev-sdk-ref. This is a reproducible source pin, not a runtime minimum.
• Runtime minimum remains unchanged; min_kandev_version remains unset. The Action is feature-detected and the legacy path remains for older API v1 hosts.
• Packaged UI smoke previously passed against the Action-capable host at 570600439036e81f8e9e1c63f15c4abce8a6c846 and pre-Action host 7eb9c228b86907a161969f34e19761de0dd3863f, using isolated fixtures and synthetic CPU data. The conflict resolution did not change the UI or harness files.
• Windows is compile-tested only.

Checks on the conflict-resolved tree

• go mod tidy is reproducible; go.mod and go.sum remain unchanged after tidy.
• npm ci --prefix .harness completed with no reported vulnerabilities.
• make check-format, make vet, and make test passed. UI tests: 3/3; package-verifier and release-version negative tests passed.
• make test-harness passed with no console errors.
• make verify-package passed for all five manifest platforms; make verify-package-host passed on linux-amd64.
• sh scripts/verify-release-version.sh v0.1.3 kandev-plugin-task-manager-0.1.3.tar.gz passed.
• The release checksum sequence was exercised on the generated archive; its embedded checksums were preserved and archive SHA-256 appended.
• All three workflow YAML files parsed successfully. git diff --check passed.
• GitHub CI run 36785929688 passed: tidy, formatting, vet, tests, and current-platform packaging.
• GitHub Build run 36785929698 passed: all five supported packages and package verification.
• GitHub reports the PR is open, Draft, and mergeable with no conflicts; auto-merge is unset.

Coordination with PR #3

PR #3 remains open at f214c7bacd773ec9925f8e46462dad1c7902e73b. This PR does not include it. Both PRs modify ui/bundle.js, Makefile, README.md, .gitignore, .github/workflows/ci.yml, .harness/build-globals.mjs, .harness/harness.js, .harness/package.json, .harness/real-app.mjs, .harness/shoot.mjs, and go.sum. PR #3 introduces configurable multi-metric top-bar content and sampler/product behavior. This PR preserves the current single-metric CPU behavior and sampling. Reconcile the Action shell and mobile presentation with #3's multi-metric rendering and integrate the browser harness changes before either merge order. Preserve #3's product/sampling changes if it lands first; do not restore the prior single-metric UI or replace its fixtures. Dependabot PR #1 overlaps the Go dependency update; resolve against the final module state.

No stable release containing PR #3943 has been validated. Keep this PR Draft until a stable host release includes that change and this package is re-pinned and checked against it.