feat(import): import connections from Beekeeper Studio

[datlechin]

Summary

Adds Beekeeper Studio as a 4th source for the Import from other apps flow, alongside TablePlus, Sequel Ace, and DBeaver.

What it does

• Detects Beekeeper Studio via LaunchServices (bundle id `io.beekeeperstudio.desktop`), so a fresh install is recognized even before the user opens it.
• Reads `~/Library/Application Support/beekeeper-studio/app.db` (SQLite) via the built-in SQLite3 C library, read-only, no journal files written.
• Imports the local workspace only (`workspaceId = -1`). Cloud-synced workspaces require a Beekeeper Cloud account and have their own source of truth.
• Maps the connection_folder hierarchy to TablePro groups.
• Maps SSH config including bastion (jump host) — first importer to populate `ExportableSSHConfig.jumpHosts`.
• Decrypts saved passwords using Beekeeper's two-tier key scheme.

Driver coverage

MySQL, MariaDB, PostgreSQL, Redshift, CockroachDB, SQLite, SQL Server, Oracle, MongoDB, Redis, Cassandra, ClickHouse, BigQuery, DuckDB, libSQL.

Beekeeper's Snowflake / Trino / Firebird / SQL Anywhere / SurrealDB connections are skipped with a warning since TablePro has no driver for them.

Password decryption

`BeekeeperEncryptor` re-implements the `simple-encryptor` Node.js format Beekeeper uses (AES-256-CBC, SHA-256-derived key, IV-per-record, plaintext is JSON):

1. Read `~/Library/Application Support/beekeeper-studio/.key`
2. Decrypt with Beekeeper's hardcoded bootstrap key to get the per-install user key
3. Use the user key to decrypt each password column

No keychain prompts (Beekeeper stores everything in its data directory).

Test plan

• Install Beekeeper Studio, do not open it → appears as available in the import dialog
• With Beekeeper connections (any driver TablePro supports): all show in preview
• With Include passwords on: passwords arrive populated in the new connections
• With Snowflake/Firebird/etc. in Beekeeper: those rows are skipped, the rest import cleanly
• Connection folder names map to TablePro groups
• SSH connection with bastion: jumpHost is preserved
• SSL connection: cert paths preserved