chore: auto-commit (286 archivos)

- .claude/agents/fn-orquestador/SKILL.md
- .claude/commands/fn_claude.md
- .claude/rules/INDEX.md
- .claude/rules/cpp_apps.md
- .claude/rules/ids_naming.md
- CHANGELOG.md
- apps/dag_engine/README.md
- apps/dag_engine/api.go
- apps/dag_engine/dags_migrated/example.yaml
- apps/dag_engine/dags_migrated/example_lineage_tracking.yaml
- ...

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

docs/capabilities/docker.md

@@ -1,6 +1,6 @@
 # Capability: docker
 
-_(Descripcion del grupo — editar a mano)_
+Operar Docker desde Go y Bash. Cubre: build (`docker_build_image`), run/stop/rm (`docker_run`, `docker_stop_container`, `docker_rm_container`), Docker Compose (`docker_compose_up`, `down`, `restart`, `ps`, remoto via SSH), inspect/logs/exec, networks, volumes, registry push/pull. Pipelines de deploy combinan estas atomicas: `deploy_app`, `dockerize_app`, `docker_compose_remote_deploy`.
 
 ## Funciones
 
@@ -48,8 +48,37 @@ _(Descripcion del grupo — editar a mano)_
 
 ## Ejemplo canonico
 
-_(Anadir 1-2 bloques de codigo end-to-end)_
+### Build + run local
+
+```bash
+./fn run docker_build_image --path . --tag myapp:latest
+./fn run docker_run --image myapp:latest --name myapp --port 8080:8080 --detach
+./fn run docker_inspect_container --name myapp | jq .
+./fn run docker_container_logs --name myapp --tail 100
+```
+
+### Docker Compose local
+
+```bash
+./fn run docker_compose_up --file docker-compose.yml --detach
+./fn run docker_compose_ps
+./fn run docker_compose_restart --service api
+./fn run docker_compose_down
+```
+
+### Deploy a VPS con Compose + git pull
+
+```bash
+./fn run docker_compose_remote_deploy \
+  --host organic-machine \
+  --remote-dir /srv/coolify/myapp \
+  --branch master \
+  --compose-files "docker-compose.yml docker-compose.prod.yml"
+```
 
 ## Fronteras
 
-_(Que NO cubre este grupo)_
+- **NO maneja Kubernetes ni Swarm**. Solo Docker engine + Compose.
+- **NO instala Docker**. Asume `docker` y `docker compose` ya disponibles en PATH (local + remoto).
+- **NO genera Dockerfiles a partir de codigo**. Solo opera contenedores y composes. Generacion: `generate_dockerfile_go_infra` del grupo `deploy`.
+- **NO maneja secretos Docker Swarm**. Pasa secrets via env vars o files montados via `--volume`.