Expose browser pool resolved references

[IlyaasK]

Summary

• add computed profile_id to kernel_browser_pool
• add computed ordered extension_ids
• prefer authoritative top-level resolved IDs from the Kernel Go SDK
• accept legacy response echoes only when they contain IDs
• validate omission, nullability, element types, non-empty IDs, and list order
• update generated Registry documentation

Why this belongs in v1

This extends the read-only browser-pool data source with stable durable identities. It is additive to the v0 provider and intentionally separate from the core lookup/project-scope PR so canonical-reference semantics can be reviewed independently.

API contract and state semantics

Top-level profile_id and extension_ids are authoritative because browser_pool_config may echo name selectors supplied during creation. Authoritative fields always win. For older responses that omit them, fallback succeeds only when the echoed profile/extensions already contain canonical IDs.

profile_id omission means no profile; explicit JSON null is rejected because the SDK field is optional but non-nullable. An authoritative empty extension_ids array becomes an empty computed Terraform list. Extension order is preserved.

Intentionally unsupported in this PR

• remaining browser-pool durable scalar configuration
• viewport and Chrome policy
• runtime counters or leased/session state
• browser-pool writes
• live acceptance coverage

No v0 behavior is removed or changed.

Tests run

• go test -count=20 ./internal/datasources/browserpool
• go test -race ./internal/datasources/browserpool ./internal/provider
• go test -short -timeout=2m ./...
• go vet ./...
• test -z "$(gofmt -l cmd internal)"
• go mod verify
• go mod tidy -diff
• terraform fmt -check -recursive examples
• bash scripts/check-docs.sh
• git diff --check

Tests cover authoritative precedence, legacy ID-only fallback, profile omission, explicit null rejection, empty and ordered extension lists, malformed field types, empty IDs, and selector-name rejection.

Acceptance status

Not run in this PR. Live SDK resolved-reference responses, GET-by-name, and project scoping remain a non-blocking integration risk for the later opt-in acceptance slice.

---

Note

Low Risk
Additive read-only data source attributes with validation; no writes or changes to existing lookup behavior.

Overview
Adds read-only profile_id and ordered extension_ids to the kernel_browser_pool data source so Terraform can reference stable IDs instead of name selectors echoed in browser_pool_config.

Flattening prefers top-level SDK profile_id / extension_ids when present; otherwise it falls back to legacy nested profile/extension objects only when they include canonical IDs (name-only echoes are rejected). Invalid shapes (null profile, malformed lists, empty IDs) surface as diagnostics.

Docs and unit tests cover authoritative precedence, legacy fallback, omission, and rejection cases.

^{Reviewed by Cursor Bugbot for commit 7637450. Bugbot is set up for automated code reviews on this repo. Configure here.}