fix(cicd): fix aggregate commands, add --level to events search

[telecatser]

Summary

Fixes two silent bugs where pup cicd events aggregate and pup cicd tests aggregate called the search API instead of the aggregate API, making those commands return search hits rather than bucketed counts/averages. Also adds --level to pup cicd events search for job/stage/step granularity filtering.

Changes

• src/commands/cicd.rs: Fix events_aggregate and tests_aggregate to call aggregate_ci_app_pipeline_events / aggregate_ci_app_test_events — previously both called the search API silently
• src/commands/cicd.rs: Wire compute, group_by, limit args that were previously dropped with .. in both aggregate match arms (src/main.rs)
• src/commands/cicd.rs: Add --level param to events_search (pipeline/stage/job/step); injects @ci.level:<value> filter into query
• src/commands/cicd.rs: Replace hand-rolled aggregation function parser with util::parse_compute_raw pattern from traces.rs; compute now uses avg(@duration) / percentile(@duration, 95) syntax — removes the need for a separate --metric flag
• src/commands/cicd.rs: Simplify 6-line time-parsing boilerplate in 4 functions → util::parse_time_to_datetime().to_rfc3339() (already used in tests_list)
• src/commands/cicd.rs: Extract build_ci_compute_spec shared helper used by both aggregate functions
• src/main.rs: Change aggregate limit from i32 to i64 to match the API type directly
• agents/cicd.md: Fix pup cicd tests flaky → pup cicd flaky-tests search; fix pipeline search/aggregate → pup cicd events search/aggregate; add test-optimization settings/policies/flaky-test-update commands
• skills/dd-pup/SKILL.md: Add CI/CD quick-reference rows

Testing

• All existing tests pass
• New tests: test_cicd_events_aggregate, test_cicd_tests_aggregate, test_cicd_events_search_invalid_level, test_cicd_events_aggregate_invalid_compute, test_cicd_tests_aggregate_invalid_compute
• cargo clippy -- -D warnings clean
• cargo fmt --check clean

---

🤖 Generated with Claude Code