Admin UI for installed bundle upgrades and local overrides

[chubes4]

Problem

CLI is enough for early development, but bundle upgrades need a site UI for non-CLI users and for reviewing prompt/flow changes safely.

Desired UI

An installed bundles screen should show:

• installed bundles and versions
• upgrade availability
• artifact status: clean, modified, missing, orphaned
• artifact diffs
• unresolved auth refs
• approve/reject/keep-local controls
• apply results

Acceptance criteria

• UI can display upgrade plans generated by the bundle upgrade planner.
• UI can create and resolve PendingActions for approval-required changes.
• Local overrides are clearly marked.
• Secret values are never displayed.
• UI uses the same backend contracts as the CLI.

Context

This is product surface for safely updating deployable agent behavior shipped by plugins or bundle repos.

AI assistance

• AI assistance: Yes
• Tool(s): OpenCode (GPT-5.5)
• Used for: Drafting the issue from product/design discussion; Chris remains responsible for prioritization and implementation.

[chubes4]

Still valid. The backend pieces shipped in v0.97.1: PR #1550 added the upgrade planner/PendingAction support and PR #1553 added agent-bundle install/list/status/diff/upgrade/apply CLI coverage. There is still no admin UI for installed bundles, upgrade availability, artifact diffs, unresolved auth refs, or approve/reject/keep-local controls. Next actionable slice: build the UI against the same planner/PendingAction contracts that the CLI now uses.