More insight into k8s resource relations

This release makes resource relationships first-class: every overview now answers "who manages this?" and "what references this?" — the groundwork for a topology graph view still to come.

🔗 New sections: Managed by & Referenced By

Two new overview sections, available on every kind, built on a shared relation engine that costs nothing on kinds that have no relations.

• Managed by — a stepper in the overview aside that walks the full provenance chain from the object you're looking at up to the controller that owns it, and on to the GitOps source (Helm release, Flux Kustomization, Argo application) and the commit behind it. Collapsed by default, with links out to the repository when the source exposes one.
• Drift warning — editing an object a controller will immediately revert now warns you up front, as a dismissible popover in the action bar, on any kind.
• Referenced By — reverse-relation groups in the aside: the Services, Ingresses, HPAs, PodDisruptionBudgets and NetworkPolicies that point at the object, each group titled by the kind it contains and showing a count.
• Relations that follow real Kubernetes semantics — owner references, pod-template references (the ConfigMaps, Secrets, ServiceAccounts and PVCs a workload actually mounts), and Service↔Pod resolved through EndpointSlices rather than guessed from selectors.
• Section hints — Managed by, Referenced By, App Info and Node Platform now explain what they're showing, right on the section title.

🐛 Fixes

• Command palette ranking — row actions now rank above every kind of navigation, and a literal title match beats a fuzzy alias match, so the obvious result is the first result.
• Command palette stability — list entries no longer shift or collide as you type; the palette's own keys are structurally unique.
• Resource discovery — API groups are deduped on group/plural instead of group/version/kind, so a kind served by several versions no longer appears more than once.
• Node overview — host path and host port bindings are now styled and clickable as links to the pods behind them.
• Status bar — the settings button sits next to Copy Deeplink, and both it and the permissions button have tooltips.
• Resource lists — an unregistered fold column no longer logs an error.
• CLI — the detached GUI's stderr goes to a log file instead of being lost.

🧹 Misc / Chore

• Topology graph view — a topology canvas and a per-kind Topology tab were built on top of the new relation engine but stay hidden in this release, pending another iteration on the canvas.