S56: spawn template overhaul + system-wide README push + .gitkeep cleanup (#129)

- Spawn template system rebuilt: regenerate-registry command (3-pass ID matching),
  registry 26→41 files, generate_branch_meta fixed, Phase 0 snapshot added
- System-wide push: 12/12 branches updated (227 additions, 0 errors)
- READMEs added to all standard directories across 15 branches
- .claude/settings.local.json tracked system-wide (deny rules)
- 35 .gitkeep files removed (replaced by READMEs)
- Bypass files updated across 13 branches
- Bugs fixed: manager citizen_class crash, backup rglob performance

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

src/aipass/devpulse/.aipass/README.md

@@ -0,0 +1,3 @@
+# Branch Prompt
+
+AI context for `DEVPULSE`. The `aipass_local_prompt.md` file is injected every turn, telling the AI who you are and how to work in your branch.

src/aipass/devpulse/.claude/README.md

@@ -0,0 +1,5 @@
+# Claude Code Settings
+
+Claude Code configuration for `DEVPULSE`.
+
+Contains `settings.local.json` with permission rules. Most branches are denied raw git commands and must use `drone @git` instead.

src/aipass/devpulse/.claude/settings.local.json

@@ -2,16 +2,8 @@
   "permissions": {
     "allow": [],
     "deny": [
-      "Bash(git reset*)",
-      "Bash(git rebase*)",
-      "Bash(git merge*)",
-      "Bash(git config*)",
       "Bash(git push --force*)",
       "Bash(git push -f *)",
-      "Bash(git checkout -- *)",
-      "Bash(git checkout .*)",
-      "Bash(git restore --staged*)",
-      "Bash(git restore .*)",
       "Bash(git clean*)",
       "Bash(git branch -D*)",
       "Bash(git stash drop*)",
@@ -21,7 +13,6 @@
       "Bash(git checkout -b*)",
       "Bash(git commit*)",
       "Bash(git push*)",
-      "Bash(git add*)",
       "Bash(gh pr create*)",
       "Bash(gh pr close*)"
     ],

src/aipass/devpulse/.seedgo/README.md

@@ -0,0 +1,5 @@
+# Standards Bypass
+
+Seedgo audit bypass config for `DEVPULSE`.
+
+When an audit flags a false positive that doesn't apply to your architecture, add a bypass entry in `bypass.json` with a reason explaining why it's justified.

src/aipass/devpulse/.seedgo/bypass.json

@@ -1 +1,23 @@
-{}
+{
+  "metadata": {
+    "version": "1.0.0",
+    "created": "2026-03-25",
+    "description": "Standards bypass configuration for this branch"
+  },
+  "bypass": [],
+  "notes": {
+    "usage": "Add entries to bypass specific seedgo standard violations",
+    "example": {
+      "file": "apps/example.py",
+      "standard": "imports",
+      "reason": "Legacy import required for compatibility"
+    },
+    "fields": {
+      "file": "Relative path to the file",
+      "standard": "Which standard to bypass (imports, cli, naming, etc.)",
+      "lines": "Optional array of line numbers",
+      "pattern": "Optional regex pattern to match",
+      "reason": "Why this bypass exists"
+    }
+  }
+}

src/aipass/devpulse/apps/README.md

@@ -0,0 +1,8 @@
+# Apps
+
+Application layer for `DEVPULSE`.
+
+- `devpulse.py` — Entry point. Auto-discovers and routes commands to modules.
+- `modules/` — Business logic and orchestration. One module per command.
+- `handlers/` — Implementation details. Called by modules, never by CLI directly.
+- `plugins/` — Scheduled tasks and extensions.

src/aipass/devpulse/apps/__init__.py

@@ -0,0 +1 @@
+# DEVPULSE apps package

src/aipass/devpulse/apps/devpulse.py

@@ -0,0 +1,86 @@
+"""
+DEVPULSE Branch - Main Orchestrator
+
+Auto-discovery architecture:
+- Scans modules/ directory for .py files with handle_command()
+- Routes commands to discovered modules automatically
+- No manual imports or routing needed
+"""
+
+import sys
+import importlib
+from pathlib import Path
+from typing import List, Any
+
+from aipass.prax import logger
+
+# =============================================================================
+# MODULE DISCOVERY
+# =============================================================================
+
+MODULES_DIR = Path(__file__).parent / "modules"
+
+
+def discover_modules() -> List[Any]:
+    """Auto-discover modules in modules/ directory."""
+    modules = []
+
+    if not MODULES_DIR.exists():
+        return modules
+
+    for file_path in MODULES_DIR.glob("*.py"):
+        if file_path.name.startswith("_"):
+            continue
+
+        module_name = f"apps.modules.{file_path.stem}"
+
+        try:
+            module = importlib.import_module(module_name)
+            if hasattr(module, "handle_command"):
+                modules.append(module)
+        except Exception as e:
+            logger.error(f"[DEVPULSE] Failed to load module {module_name}: {e}")
+
+    return modules
+
+
+def route_command(command: str, args: List[str], modules: List[Any]) -> bool:
+    """Route command to appropriate module."""
+    for module in modules:
+        try:
+            if module.handle_command(command, args):
+                return True
+        except Exception as e:
+            logger.error(f"[DEVPULSE] Module {module.__name__} error: {e}")
+    return False
+
+
+# =============================================================================
+# MAIN ENTRY POINT
+# =============================================================================
+
+def main():
+    """Main entry point - routes commands or shows help."""
+    modules = discover_modules()
+    args = sys.argv[1:]
+
+    if len(args) == 0 or args[0] in ["--help", "-h", "help"]:
+        print(f"DEVPULSE - {len(modules)} modules discovered")
+        for module in modules:
+            name = module.__name__.split(".")[-1]
+            desc = (module.__doc__ or "").strip().split("\n")[0] if module.__doc__ else "No description"
+            print(f"  {name:20} {desc}")
+        return 0
+
+    command = args[0]
+    remaining = args[1:] if len(args) > 1 else []
+
+    if route_command(command, remaining, modules):
+        return 0
+
+    print(f"Unknown command: {command}")
+    return 1
+
+
+if __name__ == "__main__":
+    sys.exit(main())

src/aipass/devpulse/apps/handlers/README.md

@@ -0,0 +1,5 @@
+# Handlers
+
+Implementation details for `DEVPULSE`.
+
+Handlers do the actual work. They are called by modules, never directly by the CLI. Keep business logic in modules, implementation in handlers.

src/aipass/devpulse/apps/modules/README.md

@@ -0,0 +1,5 @@
+# Modules
+
+Business logic for `DEVPULSE`. One module per command.
+
+Modules orchestrate work by calling handlers. They are the public API of the branch — drone routes commands here.

src/aipass/devpulse/apps/plugins/README.md

@@ -0,0 +1,5 @@
+# Plugins
+
+Scheduled tasks and extensions for `DEVPULSE`.
+
+Plugins are standalone units of work that can be scheduled via the daemon. Each plugin handles one specific recurring task.

src/aipass/devpulse/docs/README.md

@@ -0,0 +1,3 @@
+# Docs
+
+Documentation files for the `DEVPULSE` branch.

src/aipass/devpulse/templates/README.md

@@ -0,0 +1,5 @@
+# Templates
+
+Branch-specific templates for `DEVPULSE`.
+
+Any templates this branch provides to the system or uses internally. Examples: plan templates (flow), trinity templates (memory), test templates (seedgo).

src/aipass/devpulse/tests/README.md

@@ -0,0 +1,6 @@
+# Tests
+
+Pytest unit tests for `DEVPULSE`.
+
+- `conftest.py` — Shared fixtures (temp dirs, mocks, sample data).
+- `test_*.py` — Test files. Standard tests cover JSON handler, CLI routing, and error resilience. Custom tests cover branch-specific domain logic.