Python: Add Function Approval UI to DevUI (#1401)

* ensure function aproval is parsed correctly

* udpate ui, add deployment guide button, other debug panel fixes

* feat(devui): Implement lazy loading architecture with enhanced security and state management

Major architectural improvements to DevUI for better performance, security, and developer experience:

Performance & Architecture:
- Implement lazy loading for entity discovery - entities loaded on-demand instead of at startup
- Add hot reload capability for development workflow via new reload endpoint
- Reduce startup time and memory footprint by deferring module imports

Security Enhancements:
- Remove remote entity loading capabilities (POST /v1/entities/add, DELETE endpoints)
- DevUI now strictly local development tool - no remote code execution
- Add explicit security documentation and best practices in README

Frontend Improvements:
- Migrate to Zustand for centralized state management (replacing prop drilling)
- Add lightweight zero-dependency markdown renderer with code block copy support
- Improve gallery UX with setup instructions modal instead of direct URL loading
- Enhanced message UI with copy functionality and better token usage display

Testing & Quality:
- Expand test coverage for lazy loading, type detection, and cache invalidation
- Add comprehensive tests for new behaviors (+231 lines of test code)
- Improve type safety and documentation throughout

Breaking Changes:
- Remote entity loading via URLs is no longer supported
- Entities must be loaded from local filesystem only

* update ui issues, uupdate test descripion

python/packages/devui/frontend/src/services/api.ts

@@ -26,7 +26,6 @@ interface BackendEntityInfo {
   tools?: (string | Record<string, unknown>)[];
   metadata: Record<string, unknown>;
   source?: string;
-  original_url?: string;
   // Agent-specific fields (present when type === "agent")
   instructions?: string;
   model?: string;
@@ -143,6 +142,7 @@ class ApiClient {
             typeof entity.metadata?.module_path === "string"
               ? entity.metadata.module_path
               : undefined,
+          metadata: entity.metadata, // Preserve metadata including lazy_loaded flag
           // Agent-specific fields
           instructions: entity.instructions,
           model: entity.model,
@@ -168,6 +168,7 @@ class ApiClient {
             typeof entity.metadata?.module_path === "string"
               ? entity.metadata.module_path
               : undefined,
+          metadata: entity.metadata, // Preserve metadata including lazy_loaded flag
           input_schema:
             (entity.input_schema as unknown as import("@/types").JSONSchema) || {
               type: "string",
@@ -504,31 +505,6 @@ class ApiClient {
       body: JSON.stringify(request),
     });
   }
-
-  // Add entity from URL
-  async addEntity(url: string, metadata?: Record<string, unknown>): Promise<BackendEntityInfo> {
-    const response = await this.request<{ success: boolean; entity: BackendEntityInfo }>("/v1/entities/add", {
-      method: "POST",
-      body: JSON.stringify({ url, metadata }),
-    });
-
-    if (!response.success || !response.entity) {
-      throw new Error("Failed to add entity");
-    }
-
-    return response.entity;
-  }
-
-  // Remove entity by ID
-  async removeEntity(entityId: string): Promise<void> {
-    const response = await this.request<{ success: boolean }>(`/v1/entities/${entityId}`, {
-      method: "DELETE",
-    });
-
-    if (!response.success) {
-      throw new Error("Failed to remove entity");
-    }
-  }
 }
 
 // Export singleton instance