Make Linux a supported platform: HTML context menus + runtime deps + release target

`bun run start` died on Linux with ERR_DLOPEN_FAILED (missing
libayatana-appindicator3.so.1). Fixing the environment exposed the real gap:
electrobun's ContextMenu.showContextMenu is a documented no-op on Linux, and
since the UI suppresses the webview's own right-click menu, EVERY panel context
menu was silently dead there — Send to Other Panel, Open, Rename, Permissions,
Delete, Copy Path, Reveal and the column picker all unreachable. Electrobun
itself logs "Application menus are not supported on Linux. Implement menu UI in
your webview HTML instead." at boot.

- Context menus are now HTML on EVERY platform (ui/src/app/context-menu.ts +
  context-menu.service.ts), not just as a Linux fallback: one implementation
  cannot drift from a second one. The item builders are ported verbatim from
  the old bun menu, so ordering, per-platform labels and the Windows-local
  chmod hide are unchanged, and picks are emitted as the same `ctx-*` / `col:*`
  strings through RpcService.emitMenuAction — App.handleMenuAction is untouched
  and still the single dispatcher for both the macOS menubar and right-clicks.
  Adds what the native menu gave for free: arrow/Enter/Escape keys, viewport
  edge-flip, close on blur/resize/scroll. The Edit item now shows the real F4
  hint instead of the native menu's "e" mnemonic.
- New shellItemAction RPC replaces showRowMenu/showColumnsMenu — the only part
  the webview can't do itself (reveal, open-with-default, copy path). Deletes
  src/bun/context-menu.ts entirely.
- release.ts gains a linux-x64 target. Electrobun emits only the .tar.zst
  updater blob on Linux, so the artifact is a .tar.gz of the assembled app
  folder, mirroring the Windows portable zip.
- Docs: platform-notes gets a Linux runtime-dependency table (AppIndicator is
  linked HARD — a missing lib is a boot failure, not a degraded tray), the
  ldd diagnostic, GNOME tray caveat, known issues and a first-boot smoke test;
  gotchas gets the ERR_DLOPEN_FAILED trail and the benign GLX/GBM startup
  noise; architecture/build-and-release/README updated accordingly.

Verified: backend `tsc --noEmit` clean, `bun run build:ui` clean (399 kB
initial), app boots on Linux with no errors beyond the documented benign
warnings. NOT verified on macOS/Windows — the native menu is retired on those
platforms too, so the menus need eyeballing on a Mac before the next release.

Co-Authored-By: Claude <noreply@anthropic.com>

scripts/release.ts

@@ -1,5 +1,5 @@
 // Build one release artifact for one target, on the matching host:
-//   bun scripts/release.ts [--target mac-arm64|mac-x64|win-x64]
+//   bun scripts/release.ts [--target mac-arm64|mac-x64|win-x64|linux-x64]
 // Default target = the host. electrobun cannot cross-compile OSes (its
 // packaging needs host tools: codesign/hdiutil on mac, rcedit/PowerShell on
 // Windows), so win-x64 must run on a Windows machine. mac-x64 IS buildable on
@@ -11,11 +11,12 @@ import os from "node:os";
 import path from "node:path";
 
 const ROOT = path.join(import.meta.dir, "..");
-const TARGETS = ["mac-arm64", "mac-x64", "win-x64"] as const;
+const TARGETS = ["mac-arm64", "mac-x64", "win-x64", "linux-x64"] as const;
 type Target = (typeof TARGETS)[number];
 
 function hostTarget(): Target {
 	if (process.platform === "win32") return "win-x64";
+	if (process.platform === "linux") return "linux-x64";
 	return process.arch === "arm64" ? "mac-arm64" : "mac-x64";
 }
 
@@ -43,6 +44,9 @@ if (!TARGETS.includes(requested)) fail(`unknown target "${requested}" (${TARGETS
 if (requested === "win-x64" && process.platform !== "win32") {
 	fail("win-x64 must be built on a Windows machine/runner — electrobun cannot cross-compile.");
 }
+if (requested === "linux-x64" && process.platform !== "linux") {
+	fail("linux-x64 must be built on a Linux machine/runner — electrobun cannot cross-compile.");
+}
 if (requested.startsWith("mac") && process.platform !== "darwin") {
 	fail(`${requested} must be built on macOS.`);
 }
@@ -89,7 +93,12 @@ if (viaRosetta) {
 
 // ---- collect artifacts ----
 
-const [osName, archName] = requested === "win-x64" ? ["win", "x64"] : ["macos", requested.slice(4)];
+const [osName, archName] =
+	requested === "win-x64"
+		? ["win", "x64"]
+		: requested === "linux-x64"
+			? ["linux", "x64"]
+			: ["macos", requested.slice(4)];
 const prefix = `stable-${osName}-${archName}-`;
 const artifactsDir = path.join(ROOT, "artifacts");
 const outDir = path.join(ROOT, "release", requested);
@@ -109,15 +118,24 @@ for (const file of produced) {
 	out.push(name);
 }
 
-// Windows: also produce a portable zip from the assembled app folder (the
-// Setup.exe is an installer; portable = unzip anywhere and run). Best-effort:
-// the folder layout is confirmed by the first real Windows build.
-if (requested === "win-x64") {
+// Windows / Linux: package the assembled app folder directly. On Windows that
+// complements the Setup.exe installer (portable = unzip anywhere and run); on
+// Linux it is the ONLY artifact, since electrobun emits just the .tar.zst
+// updater blob there — no installer, AppImage or .deb. Best-effort: the folder
+// layout is confirmed by the first real build on each OS.
+if (requested === "win-x64" || requested === "linux-x64") {
 	const appDir = path.join(ROOT, "build", `stable-${osName}-${archName}`, BRANDING.appName);
 	if (existsSync(appDir)) {
-		const portable = path.join(outDir, `${BRANDING.appName}-${buildName}-win-x64-portable.zip`);
-		run(["powershell", "-Command", `Compress-Archive -Force -Path '${appDir}\\*' -DestinationPath '${portable}'`]);
-		out.push(path.basename(portable));
+		if (requested === "win-x64") {
+			const portable = path.join(outDir, `${BRANDING.appName}-${buildName}-win-x64-portable.zip`);
+			run(["powershell", "-Command", `Compress-Archive -Force -Path '${appDir}\\*' -DestinationPath '${portable}'`]);
+			out.push(path.basename(portable));
+		} else {
+			const tarball = path.join(outDir, `${BRANDING.appName}-${buildName}-linux-x64.tar.gz`);
+			// -C the parent so the archive unpacks into one named folder
+			run(["tar", "-czf", tarball, "-C", path.dirname(appDir), path.basename(appDir)]);
+			out.push(path.basename(tarball));
+		}
 	} else {
 		console.warn(`[release] WARN: portable skipped — app folder not found at ${appDir}`);
 	}