feat: v1 — boilerplate WxO + web

Boilerplate completo para construir soluciones agénticas sobre IBM
watsonx Orchestrate (ADK 2.x) con una capa web encima.

Destilado de cotemar-poc-n1 y dun-casos-prueba. Incluye:

- 11 docs (best practices, architecture patterns, ADK cheatsheet,
  observability, tool authoring, deployment, RUNBOOK, DEPLOY_TO_NEW_WOX,
  known-issues con 16 errores reales y fix, eval strategy, INDEX)
- 13 templates WxO (orchestrator/specialist/single-meta agents,
  3 connections, KB + runbook, observable_tool decorator, coercion
  helpers, Python tools, OpenAPI spec, backend filter endpoint, webhook
  validator HMAC, MCP connection)
- 6 scripts (deploy idempotente con fallback ADK, undeploy, reset,
  check-adk-version, new-specialist scaffold, eval-agents runner)
- 4 eval pieces (linter de best practices, runner, smoke-test, direct
  backend probe) + scenario templates
- 8 subagentes Claude (.claude/agents/) — wxo-architect, wxo-agent-author,
  wxo-tool-author, runbook-author, mock-builder, backend-tool-builder,
  eval-author, web-layer-builder
- Skill bundle fit-wxo-bootstrap/ (SKILL.md + 3 templates) listo para
  copiar a ~/.claude/skills/
- Web layer default FastAPI+HTMX con vista timeline observable + endpoint
  receptor de trazas
- Docker compose Coolify-ready (healthcheck wget -qO-, sin labels Traefik,
  network split internal:true)
- CI Gitea workflow con lint + smoke

Best practices enforced por evals/lint_wxo_yaml.py:
- A1: máx 10 tools por agente
- A3: orchestrator sin tools de remediación
- A6: agente sin propósito (react sin tools ni KB)
- T1: @observable_tool obligatorio, no @tool directo
- T3: _compat shim inline en tools.py
- D1: docker-compose sin wget --spider
- I-005: OpenAPI con description per-operation
- I-009: sin labels Traefik manuales

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

web/_default_fastapi_htmx/app/templates/index.html

@@ -0,0 +1,40 @@
+{% extends "base.html" %}
+{% block title %}Landing — fit-boilerplate-wox{% endblock %}
+
+{% block content %}
+<div class="card">
+  <h2>Boilerplate WxO + Web</h2>
+  <p>Esta es la landing por defecto del template. Reemplazala con tu UI específica.</p>
+  <ul>
+    <li><strong>WxO Agent ID:</strong> <code>{{ wxo_agent_id or "(no configurado)" }}</code></li>
+    <li><strong>WxO Instance:</strong> <code>{{ wxo_instance_url or "(no configurado)" }}</code></li>
+  </ul>
+</div>
+
+<div class="card">
+  <h3>Chat con el agente</h3>
+  {% if wxo_agent_id %}
+  <div id="wxo-chat-root"></div>
+  <script>
+    // REPLACE: pegá el snippet completo que devuelve `orchestrate channels create webchat`
+    // window.wxoChat = {
+    //   apiKey: "...",
+    //   agentId: "{{ wxo_agent_id }}",
+    //   agentEnvironmentId: "REPLACE_ENV_UUID",
+    //   locale: "es"
+    // };
+  </script>
+  <!-- <script src="https://CHANGEME/webchat.js" defer></script> -->
+  <p style="color: #6b7280; font-size: 13px;">
+    ⚠ Acordate de activar <strong>Embed Security = Off</strong> en la consola WxO (issue I-007).
+  </p>
+  {% else %}
+  <p style="color: #6b7280;">El embed se activa cuando completes <code>WXO_AGENT_ID</code> en <code>.env</code>.</p>
+  {% endif %}
+</div>
+
+<div class="card">
+  <h3>Ver trazas de tool calls</h3>
+  <p><a href="/traces">→ /traces (timeline observable)</a></p>
+</div>
+{% endblock %}