Develop: add capability resolution, safe execution, verification and CI

[david-kariuki]

Summary

This development batch significantly expands the Linux Workstation Bootstrap foundation from distro-aware bootstrap infrastructure into a safer, testable execution framework.

It introduces portable package capability resolution, external software installation support, idempotent state handling, user configuration overrides, full execution planning and confirmation, post-install verification, automated test coverage, and continuous integration.

The result is a bootstrap architecture that can resolve what needs to change before execution, avoid unnecessary work, require explicit approval, verify outcomes afterward, and validate changes automatically before merge.

Major Changes

Package Capability Resolution

Adds a portable capability layer between workstation modules and distro-specific package names.

Modules declare capabilities rather than package-manager-specific package names.

For example:

xz
├── Ubuntu -> xz-utils
├── Debian -> xz-utils
├── Kali   -> xz-utils
├── Fedora -> xz
└── Arch   -> xz

Issues Included

Closes #20
Closes #21
Closes #23
Closes #24
Closes #25
Closes #26
Closes #27
Closes #28