Test profile data source against Kernel

[IlyaasK]

Summary

• create a uniquely named durable profile fixture through internal/kernelclient
• verify kernel_profile lookup by canonical ID and exact name
• cover explicit and provider-default project scope
• verify durable creation metadata and an empty second plan
• delete the fixture, require coded not_found, and add the package to the manual acceptance workflow

Why

The selected provider release retains the existing kernel_profile data source. This PR supplies live coverage for its supported durable metadata lookup paths without adding a Terraform profile resource or modeling profile archive contents.

Scope

This PR contains only the profile data-source acceptance test and its workflow matrix entry. Acceptance-matrix and release documentation remain in their dedicated later PRs.

It does not add profile resources, archive download, browser-session profile saves, or runtime operations.

Terraform semantics

• ID lookup uses an explicit project_id
• exact-name lookup uses the provider-default KERNEL_PROJECT_ID
• both selectors settle the same canonical profile metadata
• omitted project scope remains omitted in Terraform state
• a second plan is empty
• cleanup deletes by canonical ID and verifies exact coded not_found

Tests

• go test -short -timeout=2m ./internal/datasources/profile
• go test -race -short -timeout=2m ./internal/datasources/profile
• env -u TF_ACC KERNEL_ACC=1 KERNEL_API_KEY=test KERNEL_PROJECT_ID=test KERNEL_BASE_URL=http://127.0.0.1:1 go test -count=1 -timeout=2m -v ./internal/datasources/profile -run '^TestAccProfileDataSourceByIDAndName$'
• go test -short -timeout=2m ./...
• go vet ./...
• go mod verify
• go mod tidy -diff
• gofmt -l cmd internal
• terraform fmt -check -recursive examples
• bash scripts/check-docs.sh
• bash scripts/check-markdown-links.sh

Acceptance status

The opt-in guard was verified without making a network request. A live API run was not performed because acceptance credentials are not available in this environment. The manual workflow remains a release gate.

---

Note

Low Risk
Test-only and CI workflow changes with no provider runtime behavior modifications.

Overview
Adds live Terraform acceptance tests for the existing kernel_profile data source and wires them into the manual Acceptance workflow matrix.

The new test creates a real profile via the API, then asserts lookup by ID (with explicit project_id) and lookup by exact name (using the provider-default project) return the same metadata, including that name-based reads omit project_id in state. It also runs an empty second plan and registers cleanup that deletes the fixture and asserts a not_found read afterward.

The acceptance workflow gains a Profile data source job on ./internal/datasources/profile with project_id_required: true, matching other project-scoped packages.

^{Reviewed by Cursor Bugbot for commit c2d40a7. Bugbot is set up for automated code reviews on this repo. Configure here.}