fix(setup): show accurate searchable profile contents

[Artexis10]

Summary

• replace GUI manifest/settings inference with the released engine profile inspect contract
• show accurate, searchable Apps and App settings tabs with distinct app-owner counts and settings-only labeling
• fail closed on stale/misrouted envelopes, duplicate identities/owners, and unsupported engine capabilities
• add real-engine contract drift gates plus mocked and released-engine Playwright coverage

Engine dependency

• requires Endstate engine v2.30.0 (features.profileInspection)
• engine implementation: feat(profile): add read-only profile inspection endstate#213
• engine v2.30.0 is already pinned on main by feat: bump engine to v2.30.0 #218

Verification

• 55 targeted boundary/modal/Setup tests
• 15 mock/real envelope conformance tests
• npm run test:contract against released engine v2.30.0
• mocked profile-contents Playwright: 1/1
• released-real-engine profile-contents Playwright: 1/1
• TypeScript, ESLint, strict OpenSpec 39/39
• strict production build with staged v2.30.0 sidecar
• live Chromium bridge smoke against hugo-desktop: 72 apps, settings for 8 apps, both searches, keyboard tabs, reset, and Configuration details
• independent code/security review and post-fix release verification approved