feat(extensions): implement cryptographic integrity verification for extension updates (#21772)

packages/core/package.json

@@ -68,6 +68,7 @@
     "ignore": "^7.0.0",
     "ipaddr.js": "^1.9.1",
     "js-yaml": "^4.1.1",
+    "json-stable-stringify": "^1.3.0",
     "marked": "^15.0.12",
     "mime": "4.0.7",
     "mnemonist": "^0.40.3",
@@ -102,6 +103,7 @@
     "@google/gemini-cli-test-utils": "file:../test-utils",
     "@types/fast-levenshtein": "^0.0.4",
     "@types/js-yaml": "^4.0.9",
+    "@types/json-stable-stringify": "^1.1.0",
     "@types/picomatch": "^4.0.1",
     "chrome-devtools-mcp": "^0.19.0",
     "msw": "^2.3.4",