feat: STACKIT storage, provider-owned roles and transitive role membership

[v-kessler]

Bumps @lakekeeper/console-components to 0.23.0. No source changes are needed
in the app, but what its users get is new rather than a fix:

• STACKIT as a warehouse storage provider, with field guidance that says what
  the credential-group URN and bucket name actually are.
• Provider-owned roles (LDAP, Entra, Okta, OIDC) are marked as such, and the
  writes their API refuses — renaming, editing membership — are no longer
  offered. Provider membership syncs lazily, so the list only ever holds
  principals who have signed in, and the UI now says so.
• Transitive role membership, where the authorizer can answer it. Only
  OpenFGA implements role_assignments(), so the scope is derived from
  authz-backend and withheld elsewhere rather than 501-ing.
• A reader without grant access no longer gets a red snackbar from every pane
  that asks, and the hierarchy survives partial access, marking the levels they
  cannot see.
• Tag management works again with authentication disabled; tag edit and delete
  are gated on the tag's own actions.
• A warehouse with STS disabled no longer blames CORS for what is a vending
  problem.

Summary by CodeRabbit

• Updates
  • Updated the console components to version 0.23.0.
  • Refreshed supporting packages used by the application to maintain compatibility with the updated components.
  • No changes were made to exported or public interfaces.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: c43c0347-3783-4d05-ba25-5e10de20554d

📥 Commits

Reviewing files that changed from the base of the PR and between 77e8ca6 and 4481470.

⛔ Files ignored due to path filters (1)

• package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing (2)

• package.json
• src/assets/dependencies.json

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

Walkthrough

The PR updates @lakekeeper/console-components to v0.23.0, aligns the components package version, and adds five Rust dependencies with specified versions and features.

Changes

Dependency updates

Layer / File(s)	Summary
Update console components version package.json, src/assets/dependencies.json	The console component references and the components package version now use 0.23.0.
Add Rust dependencies src/assets/dependencies.json	The manifest adds aws-lc-rs, hyper-util, jsonwebtoken, socket2, and tikv-jemalloc-ctl with specified versions and features.

Priority: ➖ Normal

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Feature

Merge Risk: ⚪ Minimal · up to 44814

The manifest-only update introduces no identified merge-blocking risk.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies the main functionality delivered by the dependency update: STACKIT storage, provider-owned roles, and transitive role membership.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch feat/console-components-0.23.0

Warning

Some tools did not complete. Review the errors below.

🔧 ESLint

If the error stems from missing dependencies, add them to the package.json file. For unrecoverable errors (e.g., due to private dependencies), disable the tool in the CodeRabbit configuration.

package.json

Parsing error: Unexpected token :

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{A rabbit reads each line,
The patch grows clear beneath the moon,
Small changes hop in place,
Tests guard the garden path,
Reviews bloom before the dawn.}

_{Comment @coderabbitai help to get the list of available commands.}