fix: restore go.sum for generated CLI projects (apache#3589)

* Document the Sonar CLI lockfile repair

Define the evidence-backed scope, dependency checksum design, TDD regression, Linux verification, and release boundary for restoring generated-project go.sum files.

Constraint: Preserve the dynamic protobuf generation architecture and target only the two CLI scaffolds.

Confidence: high

Scope-risk: narrow

Tested: git diff --check; specification placeholder and scope scan.

Not-tested: Implementation tests are deferred to the execution plan.

Co-authored-by: OmX <omx@oh-my-codex.dev>
Signed-off-by: Xin.Zh <alexstocks@foxmail.com>

* fix: restore dependency locks for generated CLI projects

SonarCloud flags the newApp and newDemo scaffold go.mod files because their dependency lockfiles were removed while the generator still emits buildable Go modules.

Restore one shared generated go.sum payload, emit it from both generator paths, keep matching golden fixtures, and add a regression test for the direct dependency checksums.

Constraint: Preserve dynamic protobuf generation and the existing minimal go.mod templates.

Confidence: high

Scope-risk: narrow

Red: go test ./cmd -run '^TestGeneratedProjectsIncludeDependencyLocks$' -count=1 -v failed because both generated go.sum files were absent.

Green: targeted generator tests, Windows and WSL go test ./... and go vet ./..., plus WSL make test-generated-projects.

Tested: Go 1.26.2 on Windows; Go 1.25.1 on WSL/Linux; generated newApp and newDemo make test flows.

Not-tested: SonarCloud remote Quality Gate requires the pushed PR check.

Co-authored-by: OmX <omx@oh-my-codex.dev>
Signed-off-by: Xin.Zh <alexstocks@foxmail.com>

* docs: remove superpower planning artifacts

The docs/superpowers directory contains local agent design and implementation plans rather than project documentation.

Remove all tracked files from that directory and ignore the root path so future local plans are not added to Git.

Constraint: Preserve the existing Sonar CLI lockfile repair.

Confidence: high

Scope-risk: narrow

Tested: git diff --cached --check; repository-wide docs path and content scans; git check-ignore positive and negative probes.

Not-tested: Go tests were not rerun because no source, dependency, generator, or test files changed.

Co-authored-by: OmX <omx@oh-my-codex.dev>
Signed-off-by: Xin.Zh <alexstocks@foxmail.com>

---------

Signed-off-by: Xin.Zh <alexstocks@foxmail.com>
Co-authored-by: OmX <omx@oh-my-codex.dev>

Author: AlexStocks

.gitignore

@@ -42,3 +42,6 @@ metadata/report/zookeeper/zookeeper-4unittest/
 # macOS
 .DS_Store
 .history
+
+# Local AI agent planning artifacts
+/docs/superpowers/