feat: v1 — boilerplate WxO + web

Boilerplate completo para construir soluciones agénticas sobre IBM
watsonx Orchestrate (ADK 2.x) con una capa web encima.

Destilado de cotemar-poc-n1 y dun-casos-prueba. Incluye:

- 11 docs (best practices, architecture patterns, ADK cheatsheet,
  observability, tool authoring, deployment, RUNBOOK, DEPLOY_TO_NEW_WOX,
  known-issues con 16 errores reales y fix, eval strategy, INDEX)
- 13 templates WxO (orchestrator/specialist/single-meta agents,
  3 connections, KB + runbook, observable_tool decorator, coercion
  helpers, Python tools, OpenAPI spec, backend filter endpoint, webhook
  validator HMAC, MCP connection)
- 6 scripts (deploy idempotente con fallback ADK, undeploy, reset,
  check-adk-version, new-specialist scaffold, eval-agents runner)
- 4 eval pieces (linter de best practices, runner, smoke-test, direct
  backend probe) + scenario templates
- 8 subagentes Claude (.claude/agents/) — wxo-architect, wxo-agent-author,
  wxo-tool-author, runbook-author, mock-builder, backend-tool-builder,
  eval-author, web-layer-builder
- Skill bundle fit-wxo-bootstrap/ (SKILL.md + 3 templates) listo para
  copiar a ~/.claude/skills/
- Web layer default FastAPI+HTMX con vista timeline observable + endpoint
  receptor de trazas
- Docker compose Coolify-ready (healthcheck wget -qO-, sin labels Traefik,
  network split internal:true)
- CI Gitea workflow con lint + smoke

Best practices enforced por evals/lint_wxo_yaml.py:
- A1: máx 10 tools por agente
- A3: orchestrator sin tools de remediación
- A6: agente sin propósito (react sin tools ni KB)
- T1: @observable_tool obligatorio, no @tool directo
- T3: _compat shim inline en tools.py
- D1: docker-compose sin wget --spider
- I-005: OpenAPI con description per-operation
- I-009: sin labels Traefik manuales

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

scripts/reset-wxo.sh

@@ -0,0 +1,56 @@
+#!/usr/bin/env bash
+# Borra TODO lo desplegado en el tenant WxO activo: agents, KBs, tools, connections, channels.
+# Para volver a empezar from scratch.
+
+set -euo pipefail
+
+ROOT="$(cd "$(dirname "$0")/.." && pwd)"
+cd "$ROOT"
+
+echo "════════════════════════════════════════════════════════════════"
+echo "  WxO reset — env: $(orchestrate env list 2>/dev/null | grep ACTIVE || echo '???')"
+echo "  ESTO BORRA TODO. Esperando 5 segundos para que canceles con Ctrl+C..."
+sleep 5
+
+# Channels
+echo "→ Deleting channels"
+orchestrate channels list 2>/dev/null | tail -n +2 | awk '{print $1}' | while read -r ch; do
+  [ -z "$ch" ] && continue
+  orchestrate channels delete --id "$ch" 2>/dev/null || true
+done
+
+# Agents
+echo "→ Removing agents"
+for f in wxo/agents/*.agent.yaml; do
+  [ -f "$f" ] || continue
+  name=$(grep -E '^name:' "$f" | head -1 | awk '{print $2}')
+  [ -z "$name" ] && continue
+  orchestrate agents remove --name "$name" 2>/dev/null || true
+done
+
+# KBs
+echo "→ Removing knowledge bases"
+for f in wxo/knowledge_base/*.kb.yaml; do
+  [ -f "$f" ] || continue
+  name=$(grep -E '^name:' "$f" | head -1 | awk '{print $2}')
+  [ -z "$name" ] && continue
+  orchestrate knowledge-bases remove --name "$name" 2>/dev/null || true
+done
+
+# Tools
+echo "→ Removing tools (Python + OpenAPI)"
+orchestrate tools list 2>/dev/null | tail -n +2 | awk '{print $1}' | while read -r t; do
+  [ -z "$t" ] && continue
+  orchestrate tools remove --name "$t" 2>/dev/null || true
+done
+
+# Connections
+echo "→ Removing connections"
+for f in wxo/connections/*.yaml; do
+  [ -f "$f" ] || continue
+  name=$(grep -E '^name:' "$f" | head -1 | awk '{print $2}')
+  [ -z "$name" ] && continue
+  orchestrate connections remove -a "$name" 2>/dev/null || true
+done
+
+echo "✓ Reset completo. Podés re-correr ./scripts/deploy-wxo.sh"