feat(ui): add dynamic provider schema boundary

[Alan-TheGentleman]

Context

This is PR 12 in the Registry UI chain and follows #12590.

The backend now exposes provider credential schemas through GET /api/v1/provider-schemas/{type}. The UI needs a narrow, defensive transport boundary before it can interpret or render dynamic provider onboarding forms.

Description

• add strict TypeScript contracts for provider-schema responses
• add an authenticated, no-cache adapter for /api/v1/provider-schemas/{type}
• normalize and URI-encode provider types before transport
• validate the JSON:API envelope, resource type, normalized ID binding, and secret_types map
• preserve schema values as opaque objects while rejecting non-object values
• map authentication, HTTP, malformed-response, and rejected-fetch failures to safe action results
• export the new action from the providers action boundary
• cover adapter and action contracts with focused unit tests

This PR intentionally does not interpret JSON Schema or render onboarding forms. That work belongs to the next focused child.

Chain

• Parent: [CHAIN] feat(ui): wire async Registry artifact installation #12590
• Current: provider-schema transport boundary
• Next: allowlisted schema parser and accessible renderer

Steps to review

1. Review ui/types/provider-schema.ts for the transport contracts.
2. Review ui/actions/providers/provider-schemas.adapter.ts for URL construction, authentication, and cache behavior.
3. Review ui/actions/providers/provider-schemas.ts for fail-closed response validation and safe error mapping.
4. Review both focused test files for invalid provider input, authentication, HTTP failures, malformed envelopes, invalid schema values, and rejected fetches.

Validation

• pnpm exec vitest run --project unit actions/providers/provider-schemas.adapter.test.ts actions/providers/provider-schemas.test.ts — 16/16 passed
• pnpm run test:unit — 442 files, 3,169 tests passed
• pnpm run typecheck — passed
• scoped ESLint — passed
• scoped Prettier check — passed
• primary LSP diagnostics — 0 findings across all six files
• git diff --check 67aab39847 — clean
• pre-commit hooks — passed
• native RDD review — approved (review-49e8c3c41f84f0cd)

Checklist

• The PR title follows Conventional Commits.
• Relevant tests were added and pass.
• Type checking, linting, and formatting checks pass.
• No screenshots are required because this PR has no visual changes.
• No changelog entry is required for this intermediate chained PR.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: d6435f8e-e19c-4a6a-a294-52dab211e6d1

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}