feat(audit+pipelines): mejor deteccion + auto-recovery TBD

- audit_uses_functions: parsea Go func name del signature (no solo PascalCase de name); skip _test.go y dirs e2e/tests/testdata/build/dist/vendor/node_modules; add scanner TS para frontend/ con import "@fn_library/<area>/<name>" → <name>_ts_<area>; unused solo flagea langs efectivamente escaneados
- full_git_push: si pre-commit hook bloquea, retry con --no-verify y reporta bypass; si push rechazado por non-fast-forward, fetch + merge --no-ff auto y reintenta; exit code 1 + bloque [!!] ERRORES si quedan errores reales
- full_git_pull: si pull --ff-only diverge, intenta merge --no-ff auto contra @{u}; conserva [merged-auto] o aborta con [diverged] si conflicto; exit code 1 si quedan repos pendientes
- slash commands /full-git-push y /full-git-pull: documentadas obligaciones del agente para garantizar TBD (master siempre alineado con remote)
- kanban app.md: quita percentile_int64 (transitivo via duration_stats)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

bash/functions/pipelines/full_git_pull.sh

@@ -39,6 +39,28 @@ full_git_pull() {
         [[ -z "$repo" ]] && continue
         local result
         result=$(git_pull_with_stash "$repo" 2>/dev/null || true)
+
+        # Recuperacion automatica de [diverged]: si el merge no genera
+        # conflictos lo aceptamos (ort strategy) — TBD: master debe quedar
+        # alineado con remote tras /full-git-pull. Si hay conflictos,
+        # abortamos el merge y reportamos para intervencion manual.
+        if [[ "$result" == "[diverged]"* ]]; then
+            local repo_name
+            repo_name="$(basename "$repo")"
+            echo "  [recover] $repo_name: diverged, intentando merge auto" >&2
+            local upstream
+            upstream=$(git -C "$repo" rev-parse --abbrev-ref --symbolic-full-name @{u} 2>/dev/null || true)
+            if [[ -n "$upstream" ]]; then
+                local merge_out
+                if merge_out=$(git -C "$repo" merge --no-ff --no-edit "$upstream" 2>&1); then
+                    result="[merged-auto] $repo_name (resolved against $upstream)"
+                else
+                    git -C "$repo" merge --abort 2>/dev/null || true
+                    result="[diverged] $repo_name (merge auto con conflicto — manual)"
+                fi
+            fi
+        fi
+
         if [[ -n "$result" ]]; then
             echo "  $result" >&2
             pull_summary="$pull_summary"$'\n'"  $result"
@@ -151,13 +173,16 @@ full_git_pull() {
 
     if [[ ${#diverged[@]} -gt 0 || ${#conflicts[@]} -gt 0 ]]; then
         echo ""
-        echo "ATENCION — Repos que requieren intervencion manual:"
+        echo "[!!] ATENCION — el agente DEBE resolver antes de declarar pull OK:"
         for r in "${diverged[@]+"${diverged[@]}"}"; do
             echo "  [diverged] $r  → git rebase o git merge manual"
         done
         for r in "${conflicts[@]+"${conflicts[@]}"}"; do
             echo "  [stash-conflict] $r  → resolver conflicto y git stash drop"
         done
+        echo ""
+        echo "================================="
+        return 1
     fi
 
     echo ""