[Patrick Tamunjoh (patricktamunjoh)]

Description

Adds content-cli sdk download --appId <appId> (beta). It downloads the latest Celonis SDK generated for a Codespace asset from pro-code-app-manager and stores it as an npm tarball at .celonis-sdk/<appId>.tgz, ready for npm install ./.celonis-sdk/<appId>.tgz. This is an interim step until the npm registry is available.

• New sdk command group (src/commands/sdk/) that will hold further Celonis SDK commands for Codespace custom apps.
• sdk download calls GET /pro-code-app-manager/api/npm/@celonis-sdk/<appId>/-/<appId>-latest.tgz. The versioned file name is required by the policy-guard rule for this endpoint.
• Each download replaces the existing .celonis-sdk folder. A failed download leaves it untouched.
• OAuth profiles now request the pro-code-app-manager.sdk:read and pro-code-app-manager.publish scopes first, and fall back to the previous scope sets on environments where these scopes aren't available yet.
• Added the user guide page, the command graph entry and @celonis/discovery ownership in CODEOWNERS.

Relevant links

• Jira: https://celonis.atlassian.net/browse/DISCO-69

Checklist

• I have self-reviewed this PR
• I have tested the change and proved that it works in different scenarios
• I have updated docs if needed

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
100.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud