feat(vscode): AffineScript port of extension (TS→AS campaign step 1)

[hyperpolymath]

Summary

Adds `editors/vscode/src/extension.affine` — AffineScript port of `extension.ts`, as a parallel artifact alongside the TS source.

Step 1 of the estate-wide TS→AffineScript migration campaign:

• Umbrella: [campaign] TypeScript → AffineScript estate migration (UMBRELLA) standards#239
• Step issue: [campaign #239] STEP 1 — SEED PORT: phronesis 54L VSCode extension → AffineScript standards#240

Why phronesis first

• Smallest VSCode extension in the campaign backlog (54 lines).
• All required surface confirmed bound in AS stdlib: `Vscode::getConfiguration`, `workspaceConfigGetString`, `VscodeLanguageClient::newLanguageClient/Start`.
• Pattern mirrors the affinescript dogfood at `affinescript/editors/vscode/src/extension.affine`.

What's NOT in this PR

Build pipeline integration is the follow-up:

• compile `extension.affine` → `out/extension.cjs`
• swap `package.json` `main` to point at `out/extension.cjs`
• drop `tsconfig.json` + `typescript` devDep
• delete `extension.ts`

Until that follow-up lands, `extension.ts` remains the live source. This PR is a low-risk additive step that validates the AS source + binding coverage.

Behavioural notes (documented inline)

• Unused `path` import omitted.
• `process.env` preserved by Node child_process default behaviour (`newLanguageClient` binding doesn't take env explicitly).
• `synchronize.fileEvents` collapsed in the AS binding (host shim derives it from primitives per Vscode.affine + VscodeLanguageClient.affine conventions).
• Top-level held-client pattern dropped (process-exit closes the server pipe).

Pre-PR ownership gate

```
gh repo view hyperpolymath/phronesis --json owner,isFork,parent
→ owner=hyperpolymath isFork=false parent=null
```

✓ within scope of the campaign (owner-only repo, not a fork).

Test plan

• AS source compiles to syntactically valid AffineScript (pattern-mirror of dogfood)
• Follow-up PR: build pipeline integration (compile + swap main)
• Follow-up PR: smoke test in VSCode dev host

🤖 Generated with Claude Code

[github-actions]

🔍 Hypatia Security Scan

Findings: 86 issues detected

Severity	Count
🔴 Critical	2
🟠 High	11
🟡 Medium	73

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Backup file in root",
    "type": "stale",
    "file": "META.scm.bak",
    "action": "delete",
    "rule_module": "root_hygiene",
    "severity": "medium"
  },
  {
    "reason": "Backup file in root",
    "type": "stale",
    "file": "ECOSYSTEM.scm.bak",
    "action": "delete",
    "rule_module": "root_hygiene",
    "severity": "medium"
  },
  {
    "reason": "Merge artifact in root",
    "type": "stale",
    "file": "SPEC.core.scm.orig",
    "action": "delete",
    "rule_module": "root_hygiene",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "unknown",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "unknown",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in codeql.yml",
    "type": "unknown",
    "file": "codeql.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dependabot-automerge.yml",
    "type": "unknown",
    "file": "dependabot-automerge.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "unknown",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "unknown",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "unknown",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence