Make Linux a supported platform: HTML context menus + runtime deps + release target

`bun run start` died on Linux with ERR_DLOPEN_FAILED (missing
libayatana-appindicator3.so.1). Fixing the environment exposed the real gap:
electrobun's ContextMenu.showContextMenu is a documented no-op on Linux, and
since the UI suppresses the webview's own right-click menu, EVERY panel context
menu was silently dead there — Send to Other Panel, Open, Rename, Permissions,
Delete, Copy Path, Reveal and the column picker all unreachable. Electrobun
itself logs "Application menus are not supported on Linux. Implement menu UI in
your webview HTML instead." at boot.

- Context menus are now HTML on EVERY platform (ui/src/app/context-menu.ts +
  context-menu.service.ts), not just as a Linux fallback: one implementation
  cannot drift from a second one. The item builders are ported verbatim from
  the old bun menu, so ordering, per-platform labels and the Windows-local
  chmod hide are unchanged, and picks are emitted as the same `ctx-*` / `col:*`
  strings through RpcService.emitMenuAction — App.handleMenuAction is untouched
  and still the single dispatcher for both the macOS menubar and right-clicks.
  Adds what the native menu gave for free: arrow/Enter/Escape keys, viewport
  edge-flip, close on blur/resize/scroll. The Edit item now shows the real F4
  hint instead of the native menu's "e" mnemonic.
- New shellItemAction RPC replaces showRowMenu/showColumnsMenu — the only part
  the webview can't do itself (reveal, open-with-default, copy path). Deletes
  src/bun/context-menu.ts entirely.
- release.ts gains a linux-x64 target. Electrobun emits only the .tar.zst
  updater blob on Linux, so the artifact is a .tar.gz of the assembled app
  folder, mirroring the Windows portable zip.
- Docs: platform-notes gets a Linux runtime-dependency table (AppIndicator is
  linked HARD — a missing lib is a boot failure, not a degraded tray), the
  ldd diagnostic, GNOME tray caveat, known issues and a first-boot smoke test;
  gotchas gets the ERR_DLOPEN_FAILED trail and the benign GLX/GBM startup
  noise; architecture/build-and-release/README updated accordingly.

Verified: backend `tsc --noEmit` clean, `bun run build:ui` clean (399 kB
initial), app boots on Linux with no errors beyond the documented benign
warnings. NOT verified on macOS/Windows — the native menu is retired on those
platforms too, so the menus need eyeballing on a Mac before the next release.

Co-Authored-By: Claude <noreply@anthropic.com>

docs/build-and-release.md

@@ -25,7 +25,8 @@ semver-shaped (`0.1.<n>`) for electrobun's config/updater; `BRANDING.buildLabel`
 
 ## Release builds
 
-`bun scripts/release.ts [--target mac-arm64|mac-x64|win-x64]` (default: host).
+`bun scripts/release.ts [--target mac-arm64|mac-x64|win-x64|linux-x64]`
+(default: host).
 Steps: gen-version → gen-icons → Angular build → `electrobun build
 --env=stable` → copy/rename artifacts into
 `release/<target>/miniSCP-Build<n>-<target>.*`.
@@ -37,7 +38,8 @@ Facts the script encodes:
 - **No OS cross-compile.** The CLI builds for its host (its `targets` config
   field is unread in 1.18.1); packaging needs host tools (codesign/hdiutil on
   macOS, rcedit/PowerShell on Windows). Hence one script run per artifact, on
-  the matching machine; `win-x64` on a non-Windows host errors out.
+  the matching machine; `win-x64` on a non-Windows host and `linux-x64` on a
+  non-Linux host both error out.
 - **mac-x64 from the arm64 Mac (Rosetta)**: the script downloads electrobun's
   x64 CLI binary once (`electrobun-cli-darwin-x64.tar.gz` from the GitHub
   release matching the installed version, cached at
@@ -56,7 +58,14 @@ Facts the script encodes:
   (self-extracting installer → `%LOCALAPPDATA%`) plus the script's own
   **portable zip** made from the assembled app folder under
   `build/stable-win-x64/` (layout to confirm on the first real Windows build —
-  the step warns instead of failing).
+  the step warns instead of failing); Linux → only
+  `stable-linux-x64-miniSCP.tar.zst` + `update.json`, i.e. the updater feed and
+  nothing installable, so the script's **`.tar.gz` of the assembled app folder**
+  under `build/stable-linux-x64/` IS the release artifact (same best-effort
+  warn). No AppImage/.deb/.desktop — unpack and run `bin/launcher`.
+- **Linux builds need the AppIndicator dev libraries present to RUN** (not to
+  build) — see platform-notes.md; a packaged tarball started on a machine
+  without them dies at `dlopen`.
 - The script filters artifacts by app name, so stale artifacts from older
   brandings don't get collected.