chore(agents): add "Git workflow (every task)" rule to all agents + skills

Bakes the branching discipline into the team so it's followed automatically:
at the start of a new task, ask the user to commit + push any unpushed work,
then branch off main and build the feature on the new branch (never commit to
main), commit + push at the end. Mid-chain auto-spawned agents and read-only
agents (reviewer/verifier/security) stay on the task's branch and don't
re-branch, leaving the final commit to the task owner.

Appended one identical "## Git workflow (every task)" section to all 11
.claude/agents/*.md and all 11 .claude/skills/*/SKILL.md (22 files). Docs/
tooling only (.claude/ is not in the built app) — no version bump / CHANGELOG.

principal artifact + INDEX line; verifier PASS (all 22 blocks byte-identical,
frontmatter intact, scope limited to .claude + audit files, mid-chain clause
behaviorally sound).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01VEsaHQx8cXr1hFrKU42UK6

claude_artifacts/INDEX.md

@@ -1,4 +1,5 @@
 # Artifact index
+- [principal-20260829-122943](principal-20260829-122943.md) — Team policy: appended "Git workflow (every task)" rule to all 11 agents + 11 skills (commit+push unpushed work → branch from `main` → feature on new branch; mid-chain/read-only agents stay on the branch). Docs/tooling only, no version bump. verifier PASS.
 - [engineer-20260829-122201](engineer-20260829-122201.md) — PM Insights: category items in "Alert categories" + "Watch list" now full-width single-column accordions with more space (grid→flex column, roomier card/row padding). CSS-only. v2.3.2. verifier PASS.
 - [engineer-20260829-120746](engineer-20260829-120746.md) — PM Insights: "Alert categories" + "Watch list" now collapsible accordions (new `Section`, `ChevronIcon`, `.grid[hidden]` collapse, `aria-expanded`/`aria-controls`). v2.3.1. verifier PASS.
 - [engineer-20260827-190753](engineer-20260827-190753.md) — Jira statusDurations+movements + chart #17 (Active tab), /api/analytics/jira-durations, seed-enriched from board_state. v2.3.0.

claude_artifacts/principal-20260829-122943.md

@@ -0,0 +1,31 @@
+# principal — team-wide "Git workflow (every task)" rule
+
+**Date:** 2026-08-29 · branch `chore/agent-git-workflow` · docs/tooling only (no app version bump)
+
+## Change
+User asked to bake the git discipline into the team so it's followed automatically:
+*"every new task → ask to commit and push not-pushed code → branch from master → build the
+feature on the new branch."* User chose scope: **all 11 agents + all 11 skills** (22 files).
+
+Appended one identical `## Git workflow (every task)` section to the end of every
+`.claude/agents/*.md` and `.claude/skills/*/SKILL.md`. The rule:
+- At the **start of a new task**, if the tree has uncommitted/unpushed work, **ask the user
+  to commit and push it first**.
+- Then **branch off `main`** (`git checkout -b feature/<slug>`), build the feature there,
+  **never commit directly to `main`**, commit at the end, `git push -u origin <branch>`.
+- **Mid-chain auto-spawned** agents and **read-only** agents (reviewer/verifier/security)
+  **stay on the task's branch — don't re-branch**, and leave the final commit to the task owner.
+  (This clause prevents the engineer→reviewer→verifier chain from each re-branching.)
+
+## Not shipped code
+`.claude/` is developer tooling, not part of the built app (the Docker build copies `server/`
++ `client/`), so **no version bump / CHANGELOG / build** — an artifact + INDEX line + the
+verifier gate are the appropriate audit trail here.
+
+## Verified
+- `grep -c "## Git workflow (every task)"` across the 22 targets → exactly 1 each (22 total).
+- Spot-checked a read-only agent (`verifier.md`) and a writer skill (`engineer/SKILL.md`):
+  clean append, frontmatter intact, wording fits both roles.
+- verifier: (see verifier-log entry for 2026-08-29).
+
+## Next: done.

claude_artifacts/verifier-log.md

@@ -18,3 +18,4 @@
 - 2026-08-29 11:20 · devops · SSH NAS host → mycloud.dp.ua:2323 · VERDICT: PASS · re-ran: grep 192.168.50.2 (only comment+artifact), grep NAS_HOST (all mycloud), bash -n push-to-nas.sh OK · probed: all ssh/scp/rsync hops use $NAS_HOST not hardcoded IP; port 2323 preserved; illustrative comment+historical artifact intentional · PASS
 - 2026-08-29 12:07 · engineer · Insights alert/watch sections as accordions · VERDICT: PASS · re-ran: tsc -p (clean), vite build (139 modules, exit 0), grep compiled CSS (.grid[hidden]{display:none} present, specificity/order beats .grid), token defs in globals.scss · probed: collapse hides grid via hidden+override; aria-controls id always-rendered (no dangling ref when collapsed); unique slugs alert-categories/watch-list (no dup id); per-card open state diff-unchanged (no regression); chevron rotate(90deg) bound to aria-expanded=true · PASS
 - 2026-08-29 12:23 · designer/engineer · Insights full-width accordion items (CSS) · VERDICT: PASS · re-ran: vite build OK, tsc clean, npm test 9/9 (client 6 + root 3), grepped dist CSS · probed: section hidden-collapse specificity (.grid[hidden] 0,2,0 beats .grid 0,1,0 → display:none wins), flex-column full-width via default align-items:stretch, .row internal grid columns intact + tokens compile (sass would error if undefined) · PASS
+- 2026-08-29 12:31 · docwriter/tooling · git-workflow rule appended to 22 agent+skill files · VERDICT: PASS · re-ran: grep -c=1 all 22; md5 of each block → 22 identical; head-1=--- x22, tail-1 identical x22; git branch -a (no master, default main); porcelain=22 targets+INDEX+artifact only · probed: mid-chain re-branch clause (exempts reviewer/verifier/security — holds), master→main mapping (no master branch — correct), block-drift/frontmatter-corruption (none) · PASS