feat: APAS Explorer with GPA Integration

[xander-hill]

Overview

This PR introduces the APAS Explorer feature, allowing students to sync their unmet degree requirements directly from their APAS report into Gopher Grades. It provides a bridge between raw audit data and Schedule Builder, complete with integrated GPA data for required courses.

Key Features

• APAS Sync Engine: A custom parser that extracts actionable, unmet requirements from the APAS iframe.
• State-Aware UI: A dedicated "Sync" button with a specialized CSS state-machine (Normal, Syncing, Success) to prevent logo visibility issues and provide tactile feedback.
• GPA Caching: Implemented a batch-fetching and caching layer in background.js to retrieve course GPAs from the umn.lol API without rate-limiting or performance lag.
• CSS: Unified card system with springy micro-interactions and high-contrast branding for UMN colors.

Testing Performed

• Verified sync on multiple different APAS reports (CSE, CLA, Carlson, etc).
• Confirmed course GPA injection works for both "MANDATORY" and "OR" requirement types.
• Checked for UI regressions on the standard Schedule Builder search pages.

Demo

[vercel]

@xander-hill is attempting to deploy a commit to the umn social coding Team on Vercel.

A member of the Team first needs to authorize it.

[samyok]

please use yarn instead of npm! don't make your PR diff larger than it should be.

[samyok]

Added a few concrete review notes beyond the existing yarn/npm lockfile concern. Main blockers I see are the undefined sidebar call and the APAS iframe access path.

[samyok]

This is a runtime blocker: injectSortTool is not defined anywhere in the extension, so Schedule Builder search pages with inline graphs enabled will throw a ReferenceError here before loadCourses(courseList) runs. Either include the implementation/import in this PR or remove this call.

[samyok]

This access path is brittle for APAS reports loaded in an iframe. The manifest sets all_frames: true, but init() returns immediately inside frames, so the only parser that runs is the top-frame parser. If #auditReports is cross-origin, reading contentDocument/contentWindow.document throws and the sync button stays disabled because the click handler has no try/finally. Parse inside the frame that owns the report DOM, or catch this and surface a failure state.

[samyok]

This generated node_modules lockfile should not be committed. It also indicates npm was run locally; please remove the npm lockfiles/artifacts and keep dependency changes represented through the existing Yarn workflow only.