Fix app lock refresh and design token summaries

[GCWing]

Summary

• Refresh installed built-in Product App package locks when private component resolution changes.
• Render Design Tokens non-selection actions as compact summaries with committed-token swatches.
• Add locale strings and focused Vitest coverage for compact, proposal, and collapse states.

Validation

• pnpm --dir src/web-ui exec vitest run src/flow_chat/tool-cards/DesignTokensProposalCard.test.tsx
• pnpm run type-check:web
• Not run: focused Rust test was stopped when asked to submit directly.

Payload Notes

• Docs and generated output/ assets remain local and are not included in this PR.