feat(hubble): modernize graph workbench experience

[imbajin]

Before -> After

follow #632, enhance the UI/UX + monitor/auth....

Area	Before	After
Graph workspace	Navigation, GraphSpace/graph selection, and direct URLs could lose context or land on inconsistent surfaces.	One route-first context connects Graph management, Schema, data preparation, Gremlin, algorithms, async tasks, accounts, and recovery paths.
User feedback	Loading, empty, stale, partial, unsupported, and failed requests were handled unevenly.	Explicit state, retry, canonical-back, error-boundary, keyboard-focus, localized copy, and responsive-workbench contracts across primary journeys.
Operations	Cluster visibility depended on external Dashboard/Grafana links.	Native capability-protected Cluster Overview, Nodes, and Node Detail aggregate Server/PD/Store facts with bounded fan-out, timeouts, caching, source freshness, and partial/stale reporting.
Authorization	Frontend role inference and scattered endpoint checks made direct URLs, graphspace scope, and account mutations harder to reason about.	Backend-issued minimal capability context; SUPERADMIN/SPACEADMIN/USER boundaries enforced for direct URLs, graphspace-scoped resources, account operations, and Operations.
Credentials and disclosure	Sensitive values and upstream diagnostics could persist or surface through task/error paths.	Password/token/header/secret-safe DTOs and errors; Loader retries rebuild credentials from the authenticated context instead of task metadata.
Deployment modes	PD-backed and standalone Server behavior diverged in graph, account, and Operations surfaces.	Explicit PD and authenticated standalone compatibility, with bounded fallbacks and localized unsupported-state behavior.

Review map

• Primary product flow: onboarding -> GraphSpace/graph -> Schema/data preparation -> query/algorithm -> result/task recovery.
• Primary operational flow: capability check -> source collection -> bounded aggregation -> fresh/partial/stale rendering.
• Primary security flow: login/context -> capability enforcement -> graphspace-scoped mutation -> secret-safe response/error handling.

Scope

• Includes Hubble frontend/backend, Java Client compatibility, tests, packaging, and documentation needed by the flows above.
• Matching Server/PD/Store compatibility work: feat: support secure Hubble monitoring targets hugegraph#3096
• Excludes a complete alert engine, notification channels, historical time-series storage, mobile layouts, and production capacity policy.

[codecov]

Codecov Report

❌ Patch coverage is 71.88889% with 759 lines in your changes missing coverage. Please review.
✅ Project coverage is 42.04%. Comparing base (b066b80) to head (d963a2a).
⚠️ Report is 139 commits behind head on master.

Files with missing lines	Patch %	Lines
.../hugegraph/service/op/LiveOperationsCollector.java	78.82%	73 Missing and 28 partials ⚠️
.../hugegraph/service/op/OperationsPayloadParser.java	78.84%	34 Missing and 39 partials ⚠️
...graph/service/op/DefaultOperationsDataService.java	75.00%	35 Missing and 22 partials ⚠️
...org/apache/hugegraph/service/auth/RoleService.java	60.65%	34 Missing and 14 partials ⚠️
...g/apache/hugegraph/service/auth/BelongService.java	19.29%	43 Missing and 3 partials ⚠️
...egraph/controller/graph/SampleGraphController.java	78.46%	35 Missing and 10 partials ⚠️
...ache/hugegraph/controller/auth/UserController.java	42.59%	27 Missing and 4 partials ⚠️
...che/hugegraph/service/op/OperationsHttpClient.java	73.50%	13 Missing and 18 partials ⚠️
...apache/hugegraph/service/graphs/GraphsService.java	68.53%	23 Missing and 5 partials ⚠️
...che/hugegraph/service/space/GraphSpaceService.java	53.33%	28 Missing ⚠️
... and 33 more

Additional details and impacted files

@@              Coverage Diff              @@
##             master     #743       +/-   ##
=============================================
- Coverage     62.49%   42.04%   -20.46%     
- Complexity     1903     3667     +1764     
=============================================
  Files           262      599      +337     
  Lines          9541    26973    +17432     
  Branches        886     2921     +2035     
=============================================
+ Hits           5963    11341     +5378     
- Misses         3190    14614    +11424     
- Partials        388     1018      +630     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.