feat(toolkit): support custom cloud build resources

[evanlowe]

Summary

• expose paginated TOS, CR, and CodePipeline resource discovery for deployment configuration
• accept explicit cloud credentials for TOS resource queries
• preserve custom CodePipeline workspace and pipeline selections through the cloud strategy
• reuse selected pipelines by ID or exact name and reject incompatible pipeline templates
• cover all automatic, named, and existing resource-mode mappings

Testing

• pre-commit hooks: Ruff check, Ruff format, and gitleaks
• targeted unit tests: 7 passed
• local Volcengine and BytePlus resource-mode matrix exercised through the Studio integration
• real Volcengine deployments verified with existing resources, named TOS creation, named and automatic CodePipeline creation, automatic TOS selection, and Runtime in-place update

Known limits

• the validation account had exhausted CR repository and Micro instance quotas, so automatic and named CR creation were rejected by the cloud service
• BytePlus was covered by local provider tests; no BytePlus credentials were available for a real-cloud run