v2.4.1 — Duplication scan excludes .git

Patch on v2.4.0.

Fixed — jscpd's ignore list omitted .git/, so git's own sample hooks were counted as duplication: noise in the pre-existing debt report, and a polluted denominator under every percentage the gate prints.

How it was found, and why the tests missed it — by running the gate end-to-end against real jscpd output rather than the hand-written report fixtures both suites use. test-dup-attribution.sh feeds the script a report the test file writes, and test-git-hooks.sh stubs jscpd entirely; together they prove the attribution logic and the hook's wiring, but they stub the invocation, so an ignore-list defect is structurally invisible to them. That limitation is now recorded in the suite header rather than left to be rediscovered, and the end-to-end check is the thing to repeat whenever the invocation changes.

Verified after the fix with real jscpd: a pre-existing clone passes and is reported as debt; a clone the delivery copy-pastes blocks and names both locations.

Plugin versions: coding-pipeline 2.4.1