feat(exec): add component exec terminal with WebSocket proxy

[Ketharan]

Summary

• Adds a Terminal tab to the component detail page embedding an xterm.js shell that connects via WebSocket to the OpenChoreo exec endpoint
• Implements a two-step auth flow: POST /exec/init (HTTP, token stored server-side) → WS /exec/ws?sessionId=<uuid> (no custom headers needed from browser)
• Gates access behind a new openchoreo.exec permission with per-environment ABAC support via useExecPermission

Test plan

• Navigate to a deployed component → Terminal tab is visible
• Click Connect → shell opens and accepts keyboard input
• Resize browser window → terminal reflows and PTY dimensions update on the server
• Click Disconnect → session ends cleanly; Connect starts a fresh session
• User without component:exec permission sees Forbidden state
• User with permission denied for a specific environment sees per-environment error message
• Component with no active release bindings shows "No active deployments" message

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 350487c1-425a-43a5-a779-2b1d85d66566

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

Changeset detected — the following file(s) will be released with this PR:

.changeset/component-exec-terminal.md

[codecov]

Codecov Report

❌ Patch coverage is 58.75486% with 106 lines in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
...reo/src/components/ComponentExec/useExecSession.ts	0.00%	56 Missing and 6 partials ⚠️
...src/components/ComponentExec/ComponentExecPage.tsx	82.07%	16 Missing and 3 partials ⚠️
plugins/openchoreo-backend/src/ExecSessionStore.ts	18.75%	11 Missing and 2 partials ⚠️
plugins/openchoreo-backend/src/router.ts	20.00%	7 Missing and 1 partial ⚠️
plugins/openchoreo/src/api/OpenChoreoClient.ts	0.00%	2 Missing ⚠️
plugins/openchoreo-common/src/permissions.ts	0.00%	1 Missing ⚠️
plugins/openchoreo/src/plugin.ts	50.00%	1 Missing ⚠️

📢 Thoughts on this report? Let us know!