feat: externalize apps/analysis to Gitea repos, add analysis table

- Migration 007: repo_url on apps table + analysis table with FTS5
- Analysis struct, parser, CRUD, validation, hash computation
- Selective purge: remote-only apps/analysis preserved across fn index
- CLI: fn app list/clone/pull, fn analysis list/clone/pull
- search/show/list now include analysis results
- Apps removed from git tracking (content lives in Gitea repos)
- .gitkeep for apps/ and analysis/ dirs
- Bash functions: jupyter analysis pipeline, shell utilities
- Browser domain: CDP functions moved from infra to browser

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

bash/functions/shell/find_free_port.md

@@ -0,0 +1,36 @@
+---
+name: find_free_port
+kind: function
+lang: bash
+domain: shell
+version: "1.0.0"
+purity: impure
+signature: "find_free_port([start_port: int], [end_port: int]) -> int"
+description: "Busca el primer puerto TCP libre en un rango dado usando ss y lsof. Retorna el numero de puerto a stdout."
+tags: [network, port, shell, utility]
+uses_functions: []
+uses_types: []
+returns: []
+returns_optional: false
+error_type: "error_go_core"
+imports: []
+tested: false
+tests: []
+test_file_path: ""
+file_path: "bash/functions/shell/find_free_port.sh"
+---
+
+## Ejemplo
+
+```bash
+source find_free_port.sh
+port=$(find_free_port 8888 8899)
+echo "Puerto libre: $port"
+
+# Con defaults (8888-8899)
+port=$(find_free_port)
+```
+
+## Notas
+
+Usa `ss -tln` como primer intento y `lsof` como fallback. Ambos deben confirmar que el puerto no esta en uso. Si ningun puerto esta libre en el rango, sale con exit code 1.