feat(studio): store-side source filter, provenance pills, one-click recommended sources (v0.29.0)

The Store is now the centre of capability discovery — provider
configuration moves out of Settings into the Store itself.
Three changes work together:

1. Source filter chips next to the existing status chips:
   All sources / Native / MCP / n8n. Applied client-side after
   the hub returns results so toggling is instant. The result
   count and the "Clear filters" reset both account for the
   source filter too.

2. Per-card provenance pill (`_ProvenancePill`): shows whether
   each entry is native, mcp · <provider>, or n8n · <provider>
   so the operator can triage the source at a glance — same
   role the "verified" badge plays in commercial app stores.

3. `_RecommendedSourcesStrip` replaces the older
   `_FederationNudge`. Renders curated public MCP servers
   (DeepWiki, Semgrep) as one-click cards with an inline
   `[+ Add]` button — no Settings detour, no form. Both servers
   are HTTPS Streamable-HTTP, no API key, no subprocess.
   Useful AI was considered but its 340+ tools would drown the
   index — kept out of the curated list. The strip auto-hides
   the moment any federated entry exists.

Removed the now-orphaned storeFederationNudge* ARB keys.

Signed-off-by: flemming-it <stefan.a.flemming@googlemail.com>

lib/l10n/app_en.arb

@@ -178,9 +178,36 @@
   "@storeDocsErrorNetwork": { "placeholders": { "detail": { "type": "String" } } },
   "storeDocsErrorParse": "README is not valid UTF-8.",
   "storeDocsErrorGeneric": "Could not load README.",
-  "storeFederationNudgeTitle": "Want more capabilities?",
-  "storeFederationNudgeBody": "Configure an MCP server or n8n endpoint in Settings → MCP Clients / N8N Endpoints. Discovered tools and workflows surface here as `mcp.<server>.<tool>` and `n8n.<endpoint>.<workflow>` capabilities — every Anthropic / community MCP server adds a handful at once.",
-  "storeFederationNudgeButton": "Open Settings",
+  "storeSourceLabel": "Source",
+  "storeSourceAll": "All sources",
+  "storeSourceNative": "Native",
+  "storeSourceMcp": "MCP",
+  "storeSourceN8n": "n8n",
+  "storeProvenanceNative": "native",
+  "storeProvenanceMcp": "mcp · {provider}",
+  "@storeProvenanceMcp": { "placeholders": { "provider": { "type": "String" } } },
+  "storeProvenanceN8n": "n8n · {provider}",
+  "@storeProvenanceN8n": { "placeholders": { "provider": { "type": "String" } } },
+  "storeRecommendedTitle": "Add a public source — one click",
+  "storeRecommendedBody": "Curated MCP servers reachable over HTTPS. No subprocess, no API key, no Node. Federated capabilities appear in the store immediately.",
+  "storeRecommendedAddTooltip": "Add and discover",
+  "storeRecommendedAdding": "Adding…",
+  "storeRecommendedDeepWikiTagline": "GitHub repo documentation search (AI-powered)",
+  "storeRecommendedSemgrepTagline": "Security scanning for code vulnerabilities",
+  "storeProviderAddedToast": "Added {name} — {n} federated {n, plural, =1{capability} other{capabilities}}.",
+  "@storeProviderAddedToast": {
+    "placeholders": {
+      "name": { "type": "String" },
+      "n": { "type": "int" }
+    }
+  },
+  "storeProviderAddFailed": "Could not add {name}: {error}",
+  "@storeProviderAddFailed": {
+    "placeholders": {
+      "name": { "type": "String" },
+      "error": { "type": "String" }
+    }
+  },
 
   "auditTitle": "Audit",
   "auditNoEvents": "No events yet",