✨ feat(vscode): 多人协作二期:状态分层/写校验/签名/团队视图

- 本机状态(会话id/worktree/profile/prDiffFile)迁 workspaceState,
  共享 state JSON 只留团队字段;读侧本地记录叠加,旧数据兜底
- mergeStateJsonComment 写后读回校验,并发覆盖时在最新状态上重放一次
- webhook 支持 Gitea secret,校验 X-Gitea-Signature(HMAC-SHA256),
  不匹配 401;设置面板新增 Webhook Secret 字段
- 看板新增 我的/全部 范围切换(团队视图),按工作区持久化

vscode/src/panel/handlers/settings.ts

@@ -20,6 +20,7 @@ export async function handleSettingsSave(panel: KanbanWebviewPanel, payload: {
   host: string
   token: string
   webhookPort: number
+  webhookSecret: string
   brainstormPrompt: string
   brainstormContinuePrompt: string
   implementPlanPrompt: string
@@ -90,6 +91,7 @@ export async function handleSettingsSave(panel: KanbanWebviewPanel, payload: {
       errorMessage: 'Host 和 Token 都不能为空',
       tokenSaved: !!oldToken,
       webhookPort: payload.webhookPort,
+      webhookSecret: payload.webhookSecret,
       brainstormPrompt: payload.brainstormPrompt || prev.brainstormPrompt,
       brainstormContinuePrompt: payload.brainstormContinuePrompt || prev.brainstormContinuePrompt,
       implementPlanPrompt: payload.implementPlanPrompt || prev.implementPlanPrompt,
@@ -114,6 +116,7 @@ export async function handleSettingsSave(panel: KanbanWebviewPanel, payload: {
   }
   await saveSettings(panel.context, {
     webhookPort: payload.webhookPort,
+    webhookSecret: payload.webhookSecret.trim(),
     brainstormPrompt: payload.brainstormPrompt,
     brainstormContinuePrompt: payload.brainstormContinuePrompt,
     implementPlanPrompt: payload.implementPlanPrompt,
@@ -164,6 +167,7 @@ export async function handleSettingsSave(panel: KanbanWebviewPanel, payload: {
       message: `端口配置变更，重启监听 :${newPort}`,
     })
   }
+  webhookCoordinator.ensureSecret(getSettings(panel.context).webhookSecret)
   try {
     await webhookCoordinator.ensurePort(newPort)
   }
@@ -216,6 +220,7 @@ export async function handleEditSettingsRequest(panel: KanbanWebviewPanel): Prom
     canCancel: true,
     tokenSaved,
     webhookPort: s.webhookPort,
+    webhookSecret: s.webhookSecret,
     brainstormPrompt: s.brainstormPrompt,
     brainstormContinuePrompt: s.brainstormContinuePrompt,
     implementPlanPrompt: s.implementPlanPrompt,
@@ -310,12 +315,52 @@ export async function handleProfilesList(panel: KanbanWebviewPanel): Promise<voi
  * are treated as text too — is handed to the OS default application.
  */
 const TEXT_OPEN_EXTENSIONS = new Set([
-  '.md', '.markdown', '.txt', '.text', '.csv', '.tsv', '.json', '.jsonc',
-  '.yaml', '.yml', '.toml', '.ini', '.conf', '.cfg', '.log', '.xml', '.html',
-  '.htm', '.css', '.scss', '.js', '.mjs', '.cjs', '.ts', '.tsx', '.jsx',
-  '.vue', '.py', '.go', '.rs', '.java', '.kt', '.c', '.h', '.cpp', '.hpp',
-  '.cc', '.sh', '.bash', '.zsh', '.sql', '.env', '.properties', '.gradle',
-  '.dockerfile', '.gitignore',
+  '.md',
+  '.markdown',
+  '.txt',
+  '.text',
+  '.csv',
+  '.tsv',
+  '.json',
+  '.jsonc',
+  '.yaml',
+  '.yml',
+  '.toml',
+  '.ini',
+  '.conf',
+  '.cfg',
+  '.log',
+  '.xml',
+  '.html',
+  '.htm',
+  '.css',
+  '.scss',
+  '.js',
+  '.mjs',
+  '.cjs',
+  '.ts',
+  '.tsx',
+  '.jsx',
+  '.vue',
+  '.py',
+  '.go',
+  '.rs',
+  '.java',
+  '.kt',
+  '.c',
+  '.h',
+  '.cpp',
+  '.hpp',
+  '.cc',
+  '.sh',
+  '.bash',
+  '.zsh',
+  '.sql',
+  '.env',
+  '.properties',
+  '.gradle',
+  '.dockerfile',
+  '.gitignore',
 ])
 
 /**