Build the Apple Container extension

Turns the empty scaffold into a working Nova extension for Apple Container
and container-compose, in the shape of the Docker Suite extension.

Sidebar (Scripts/Sidebar):
- System, Containers, Images, Volumes and Networks sections
- Containers grouped into compose projects via the com.docker.compose.project
  label container-compose stamps; project rows drive compose up/down/build
  against the matching workspace file
- Lifecycle, shell, logs, inspect, browse and copy commands per resource
- Apple Container publishes no event stream, so the sidebar polls while
  visible and only reloads a section when a fingerprint of its data changes,
  which keeps selection and expansion intact

Hostnames (Scripts/Hostnames.js):
- A container's hostname is <name>.<domain> and the domain lives in Apple
  Container's config.toml, which has no CLI setter, so the Hostname Domain
  preference reads and writes that file directly
- Changing it offers to register the domain with macOS and restart the
  services; the write preserves the file's other tables and its mode

Language support:
- Dockerfile and Compose syntaxes backed by tree-sitter grammars built by
  Tools/build-syntaxes.sh, pinned to revisions that generate ABI 14
- The Compose syntax is named dockercompose because that is the languageId
  docker-language-server recognises compose files by
- docker-language-server is downloaded on first use rather than bundled, at
  roughly 40 MB

Icons are generated by Tools/make-icons.py so they can be regenerated rather
than hand-maintained.

Co-Authored-By: Claude Opus 5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01UnSBcR5Lywz5Fbj5FmVbfc

Queries/dockerfile/highlights.scm

@@ -0,0 +1,87 @@
+; Instructions
+
+[
+	"ADD"
+	"ARG"
+	"AS"
+	"CMD"
+	"COPY"
+	"CROSS_BUILD"
+	"ENTRYPOINT"
+	"ENV"
+	"EXPOSE"
+	"FROM"
+	"HEALTHCHECK"
+	"LABEL"
+	"MAINTAINER"
+	"ONBUILD"
+	"RUN"
+	"SHELL"
+	"STOPSIGNAL"
+	"USER"
+	"VOLUME"
+	"WORKDIR"
+] @keyword
+
+"NONE" @value.null
+
+; Images
+
+(image_name) @identifier.type
+(image_tag) @identifier.constant
+(image_digest) @identifier.constant
+(image_alias) @identifier.type.declare
+
+; Flags such as --from=builder and --mount=type=cache,target=/root/.cache
+
+(param) @keyword.modifier
+(mount_param) @keyword.modifier
+(mount_param_param) @keyword.modifier
+
+; Keys and values
+
+(env_pair
+	name: (_) @identifier.key)
+
+(label_pair
+	key: (_) @identifier.key)
+
+(expose_port) @value.number
+
+; Variables: $HOME and ${HOME:-/root}
+
+(expansion) @identifier.variable
+(variable) @identifier.variable
+
+; Strings
+
+(double_quoted_string) @string
+(single_quoted_string) @string
+(json_string) @string
+(escape_sequence) @string.escape
+
+(heredoc_line) @string
+
+[
+	(heredoc_marker)
+	(heredoc_end)
+] @operator
+
+(line_continuation) @operator
+
+[
+	":"
+	"@"
+	"="
+] @operator
+
+[
+	"["
+	"]"
+	"{"
+	"}"
+] @bracket
+
+"," @punctuation.delimiter
+
+(comment) @comment