feat(sync): add searchable attachment API foundation

[ctawiah]

Context

This stack adds support for attaching LaunchDarkly tools and skills to prompt variations that are synchronized with repository files. This first layer adds the API and interactive search behavior the rest of the stack builds on. It does not write attachment files or change how variations are reconciled yet.

What changes

• Uses the existing sync API client for projects, configs, model configs, tools, and skills.
• Searches projects, configs, tools, and skills through their backend APIs instead of loading every result before showing a selection.
• Adds a shared paginated search prompt that keeps filtering and scrolling consistent across sync flows.
• Defines the common tool and skill shapes used by later layers.
• Adds API operations for reading, searching, creating, and updating tools and skills.
• Shows stable resource keys clearly when users select projects, configs, and variations.

Review focus

• Does the shared search flow work cleanly for projects, configs, tools, and skills?
• Are backend filters and pagination passed through correctly?
• Do the attachment API types include only the data later sync layers need?
• Is this layer independent from local attachment storage and reconciliation?

Verification

• go test ./internal/sync/api ./internal/sync/interactive ./internal/sync/bootstrap ./internal/sync/link ./internal/sync/prompt
• go test ./...
• git diff --check

Related changes

Review the stack in this order:

1. Confirm destructive watch actions
2. Guarantee prompt fingerprint convergence
3. Add searchable attachment API foundations
4. Reconcile variation attachments
5. Attach tools and skills to variations
6. Render attachment-aware review output
7. Safely clean unreferenced attachments
8. Persist sync manifests in LaunchDarkly

---

Note

Overview
Adds server-paginated catalog and attachment APIs on the unified sync Client, plus a reusable SearchSelect TUI so bootstrap and link no longer fetch entire project/config lists up front.

Catalog: Projects/Configs full-list helpers and CatalogClient are removed in favor of SearchProjects and SearchConfigs returning Page[T] with limit, offset, and API filter strings (including config mode filters used when linking by prompt mode).

Attachments: New domain types (Tool, Skill, Attachment, AttachmentRef) and API methods to search, read, create (tools only), and patch tools/skills. Tool search re-fetches each hit so results reflect the latest version; mutations send empty fields/collections to clear remote values. Shared newResourceMutationError / IsNotFound support later reconciliation.

Interactive UX: Slash-triggered search, “Load more,” alt-screen forms, taller lists, and clearer Key: labels in choice descriptions.

^{Reviewed by Cursor Bugbot for commit c33b971. Bugbot is set up for automated code reviews on this repo. Configure here.}

[ld-ahartmann]

not diving too deep but all looks reasonable here

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{Reviewed by Cursor Bugbot for commit c33b971. Configure here.}

[cursor]

Load-more cursor can go out of range

Low Severity

After a Load more fetch, receivePage always moves the cursor to previousCount, including when the new page is empty. hasMore treats a missing totalCount as unknown and offers Load more on a full page, so the last page can request another page, get zero items, drop the Load more row, and leave Index() past the end of the list. SelectedItem() then returns nil and Enter does nothing.

 

^{Reviewed by Cursor Bugbot for commit c33b971. Configure here.}