[TASK] Filter Image and Pod Config options by `hidden` and display `restrictions`

[andyatmiami]

Certification

• I certify I am an Epic Owner for Kubeflow Notebooks 2.0 and expected to create planning-related issues.

Description

🛑 Depends on:

• [TASK] Implement Compatibility Selectors /listvalues API endpoint #846 (Backend must return hidden and restrictions on option values)

Updates the Image Config and Pod Config wizard steps to:

• Filter out options where hidden: true
• Show options where restrictions.deny: true as disabled with the denyMessage.text displayed
• Handle the case where the currently selected option becomes hidden or denied after a context change
  (e.g., user goes back and picks a different image, which changes which podConfigs are visible)

Goals

• Filter imageConfig.values and podConfig.values by hidden
• Display restricted options with disabled state and explanation
• Handle "default option is hidden/denied" gracefully (select next available, or show message)
• Handle "currently selected option is no longer visible" when context changes
• Works for both Create and Edit Workspace flows
• Unit tests and Cypress tests with rule-evaluated mock responses

Acceptance Criteria

• Image config options with hidden: true are not shown
• Pod config options with hidden: true are not shown
• Options with restrictions.deny: true are shown but disabled with explanation text
• When the default option is hidden, the next available option is pre-selected (or no default)
• When the user changes image selection and re-fetches /listvalues, the pod config list updates
• Edit Workspace flow correctly displays restrictions for current option values
• Cypress tests verify filtering with mocked rule-evaluated responses

[andyatmiami]

/area frontend