Run Configuration: populate parameters & secrets from the build's declarations

**Problem**

The extension's Run Configuration view is free-form — it only shows params/secrets you hand-type. Declared members like `NuGetApiKey` (`[Parameter][Secret]`) don't appear, so the Secrets section looks empty.

Blocked on **Fallout-build/Fallout#499** (the framework graph must emit `parameters[]` first).

**Outcome**

Run Configuration reads `parameters[]` from `build-graph.json` and pre-populates:
- non-secret params → **Parameters** rows (fill value → CLI args)
- `[Secret]` params → **Secrets** rows, shown *"not set"* until a value is entered (→ SecretStorage → env var on run)

**Acceptance criteria**

- `NuGetApiKey` and peers appear automatically after a build/plan.
- Declared secrets read *"not set"* until set; values live in SecretStorage, applied as env vars on run.
- Values still flow to runs as today (params → args, secrets → env); free-form add still works for extras.
- Graceful when the graph has no `parameters[]` (older builds) — falls back to today's free-form behaviour.

从 Run Configuration 视图和 build-graph.json 的 parameters[] 数据开始，然后通过 SecretStorage 跟踪现有的参数到 CLI 以及 secret 到环境变量的流程。确认如何使用 Fallout#499 的图输出，并验证已声明的参数会填充相应的行，而不包含 parameters[] 的图则保留自由格式行为。

由索引模型根据 Issue 内容生成。