fix(devcontainer): persist profile selection

[skevetter]

Summary

Fixes #1268.

Persist explicit --devcontainer id:<profile> selection in workspace state and reuse it across lifecycle/config reconstruction. Effective selector precedence is current source/path/id, persisted source/path/id, last resolved config path for compatibility, then discovery. Selector replacements clear stale alternatives.

Adds focused unit coverage and a minimal Docker Compose multi-profile lifecycle regression (up id:max, stop, selector-free restart, delete).

Validation

• go test ./pkg/devcontainer/... ./pkg/workspace ./pkg/provider ./cmd/workspace/... ./cmd/ci/...
• task cli:lint:ci
• git diff --check
• E2E package compilation passed.

The focused E2E body was blocked by the existing Docker provider setup (provider add returned no diagnostic); the repository E2E task also has a macOS ARM GoReleaser path mismatch (darwin_arm64_v1 expected vs darwin_arm64_v8.0 produced). Pre-commit Go formatting was stopped after hanging for over four minutes; gofmt and CI-parity lint passed.

[netlify]

✅ Deploy Preview for devsydev canceled.

Name	Link
🔨 Latest commit	a204922
🔍 Latest deploy log	https://app.netlify.com/projects/devsydev/deploys/6ab5dd4959800a0008121899

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[netlify]

✅ Deploy Preview for images-devsy-sh canceled.

Name	Link
🔨 Latest commit	a204922
🔍 Latest deploy log	https://app.netlify.com/projects/images-devsy-sh/deploys/6ab5dd495d286400088e4002

[github-actions]

⚠️ This PR contains unsigned commits. To get your PR merged, please sign those commits (git rebase --exec 'git commit -S --amend --no-edit -n' @{upstream}) and force push them to this branch (git push --force-with-lease).

If you're new to commit signing, there are different ways to set it up:

Sign commits with gpg

Follow the steps below to set up commit signing with gpg:

1. Generate a GPG key
2. Add the GPG key to your GitHub account
3. Configure git to use your GPG key for commit signing

Sign commits with ssh-agent

Follow the steps below to set up commit signing with ssh-agent:

1. Generate an SSH key and add it to ssh-agent
2. Add the SSH key to your GitHub account
3. Configure git to use your SSH key for commit signing

Sign commits with 1Password

You can also sign commits using 1Password, which lets you sign commits with biometrics without the signing key leaving the local 1Password process.

Learn how to use 1Password to sign your commits.