feat(deck): visual polish — circular avatars, Inter font, token-derived palette, tinted agent icons - #580

Assumption audit results (7 verified, 1 falsified):
- FALSIFIED: controller repaint diff-skips unchanged KeySpec JSON, so
  ready-less paneIcons would never appear after async decode. Reworked
  Tasks 6/9/10/11: buildFrame stamps frame-time ready via
  iconReady(providerIconDataUrl(...)), tint colors move to a shared
  pane-tint-colors.ts leaf module, renderer draws only ready entries,
  and Task 11 proves the false->true wire flip on the real controller.
- Fixed Task 2/Task 4 inconsistency: Task 4 now updates the avatar
  font assertion to DECK_FONT_STACK.
- Corrected Vite 5 -> Vite 6.4.1; noted latin-subset-only font load.

The badge was drawn at last.x + last.size + ICON_GAP, outside the
centered icon row with no width accounting, clipping off 80px keys in
the standard overflow case (repo + 2 agents). iconLayout only fits 3
slots on-key, so the badge now OCCUPIES A ROW SLOT: drawn agent icons
shrink so repo + agents + badge never exceed MAX_ROW_SLOTS (3), and the
badge renders centered in the reserved last slot. Tests updated with
badge position/bounds assertions (harness measureText stub = 6px/char)
and a MAX_KEY_PANE_ICONS-binding check without a repo icon.

…echeck (fresheyes review)

The plan's providerIconSvg implementation indexed
Record<CodingCliProviderName, ...> with an open string, which is TS7053
under strict and would break the later 'npm run typecheck — clean'
verification gates (Tasks 8, 10, 11). Use the same
'as keyof typeof PROVIDER_ICONS' cast the repo already uses in
session-type-utils.ts.

…om RepoIcon

…ed color + ratio)

…rif)

… hook)

…mented mapping

…ta URLs

🤖 Generated with Amplifier

Co-Authored-By: Amplifier <[email protected]>

…paneIcons in the KeySpec

…n with +N overflow

…icons polish

Adds two full-pipeline proof tests to the tile-styles e2e block:
- busy agent pane surfaces as a blue-tinted paneIcon on the wire from
  real store state (pre-decode ready:false wire shape)
- pane icon flips ready false->true on the wire when its tinted data
  URL decodes, proven on the REAL DeckController + IconImageCache
  (the A1 falsification fix: readiness stamping defeats the JSON
  diff-skip that would otherwise swallow the post-decode repaint)

Also removes the now-dead DeckTab.dot field (Task 9 deleted its only
consumer when the KeySpec dot was replaced by paneIcons; the brief's
stray-dot grep flagged it). tile-state.ts stays untouched per the
pinned-module constraint; tileDot remains covered by its own suite.

docs/index.html has no deck depiction (grep clean) - left untouched.

🤖 Generated with [Amplifier](https://github.com/microsoft/amplifier)

Co-Authored-By: Amplifier <[email protected]>

… dot stays; only the icons KeySpec lost it)

🤖 Generated with [Amplifier](https://github.com/microsoft/amplifier)

Co-Authored-By: Amplifier <[email protected]>