Fixed

• VS Code extension: download URL corrected (cha-cli- prefix), extract path for cargo-dist tarball
• VS Code extension: download with progress bar and cancellation support
• VS Code extension: removed system PATH fallback for reliable self-testing
• cargo publish no longer needs --allow-dirty (WIT copies tracked in git, include in Cargo.toml)