[ZEPPELIN-6751] Prevent automatic image requests in AI Assistant answers

[miinhho]

What is this PR for?

Depends on #5570. Image-policy changes only.

Addresses the image-loading follow-up raised in #5570.

Model-generated Markdown can include image URLs containing notebook data. Loading these images automatically sends a request to the destination without user interaction.

This PR replaces automatic image loading with a Load image button. Before loading, the reader can review the image description, destination host, full URL, and a warning that the request may transmit information from the answer. Only HTTP(S) image URLs are supported.

Approval is specific to each image in an answer. Unchanged images retain approval during streaming, including when a reference definition gains a title. Changing the destination or removing and restoring an image requires fresh approval.

What type of PR is it?

Bug Fix

What is the Jira issue?

• https://issues.apache.org/jira/browse/ZEPPELIN-6751

How should this be tested?

From zeppelin-web-angular/projects/zeppelin-react, run:

npm test -- src/entities/assistant/ui/MarkdownAnswer.spec.tsx
npm run typecheck
npm run build:storybook
npm run test:storybook -- markdown-answer-images.spec.mjs

For manual verification, run npm run storybook and open Assistant / MarkdownAnswer:

1. In Image Loading, inspect the browser’s Network panel. Confirm that no image request is sent before activation. Use Enter or Space to activate Load image and confirm that only the selected image loads.
2. In Streaming Images, load the image and append the next chunk. Confirm that the image remains loaded while its destination is unchanged. When a later chunk changes the destination, confirm that the new URL is displayed and requires another activation before loading.
3. Using the image story’s content control, remove an approved image and restore the same Markdown. Confirm that it requires approval again.

Questions

• License changes? No.
• Breaking changes? No.
• Documentation? The React README explains image loading and the destination warning.