feat(cli): alien operations publish/list custom plugin bundles (ALIEN-428)

[ab-alien-dev]

What

Adds the customer-facing CLI to manage operations plugins. Operations plugins run inside a deployment via the commands interface (plugin/operation); this lets a customer publish a custom plugin bundle so its operations become available in their workspace.

Commands

• alien operations publish <bundle.zip> — reads the bundle's metadata.json, validates it (name/version present, valid ZIP), and uploads the bundle to the platform (POST /v1/operations/plugins).
• alien operations list — shows the catalog (builtin + custom).

Notes

• Platform-gated (#[cfg(feature = "platform")]): talks to the platform API via the authenticated http client, exactly like alien managers.
• Reads the ZIP with the zip crate and forwards the full metadata.json verbatim — the platform re-validates it authoritatively (the CLI doesn't depend on the private plugin crate, keeping the OSS boundary clean).
• base64-inlines the bundle so there's no multipart handling.

Test plan

• cargo test -p alien-cli --features platform operations:: — 3 tests pass (reads metadata, rejects missing metadata.json, rejects metadata missing required fields)
• cargo build -p alien-cli --features platform
• alien operations --help renders the command group

[greptile-apps]

Greptile Summary

This PR adds customer-facing operations-plugin management and the operator loops required to execute approved plugin operations.

• Adds platform-gated alien operations publish and alien operations list commands.
• Adds access-request synchronization and operations-execution loop interfaces.
• Threads injected loop hooks through normal and Windows-service startup.
• Extends operator RBAC, command routing, generated manifests, API specifications, and dependencies for the new operations workflow.

Confidence Score: 4/5

The PR does not yet appear safe to merge because a concurrent shutdown can still hide a genuine supervised-loop failure and yield a successful operator exit.

Completed loop tasks discard their join result and are classified by a later cancellation-token read, so the concurrently running CLI signal task or Windows stop thread can cancel between loop completion and classification; the operator then returns success despite the loop failure.

Files Needing Attention: crates/alien-operator/src/lib.rs, crates/alien-operator/src/cli.rs

Important Files Changed

Filename	Overview
crates/alien-cli/src/commands/operations.rs	Adds publishing and listing commands, including ZIP metadata extraction, validation, encoding, and platform API calls.
crates/alien-operator/src/cli.rs	Adds access-request and operations-execution hook injection and preserves all hooks across Windows service startup.
crates/alien-operator/src/lib.rs	Supervises the new operator loops and reports unexpected loop termination, while the previously reported concurrent cancellation classification defect remains.
crates/alien-operator/src/loops/access_requests.rs	Defines the injectable access-request synchronization loop and its cancellation-aware OSS fallback.
crates/alien-operator/src/loops/operations_exec.rs	Defines the injectable operations execution loop and its cancellation-aware OSS fallback.
crates/alien-helm/src/generator.rs	Extends generated operator manifests and RBAC resources for access-request and operations support.
crates/alien-commands/src/server/command_registry.rs	Extends command-name validation and target selection for plugin operation commands.

Sequence Diagram

sequenceDiagram
    participant User
    participant CLI as alien CLI
    participant API as Platform API
    participant Operator
    participant Plugin
    User->>CLI: operations publish bundle.zip
    CLI->>CLI: Read and validate metadata.json
    CLI->>API: POST /v1/operations/plugins
    User->>CLI: operations list
    CLI->>API: Fetch plugin catalog
    API-->>CLI: Builtin and custom plugins
    API->>Operator: Queue approved plugin/operation command
    Operator->>Plugin: Execute operation
    Plugin-->>Operator: Operation result
    Operator-->>API: Report result

Loading

_{Reviews (20): Last reviewed commit: "fix(operator): classify loop exit atomic..." | Re-trigger Greptile}