fix(analyze): honor gitignore files

[smiggleworth]

Closes #127

What changed

• honor project-root and nested .gitignore files during analyzer discovery
• apply the same ignore hierarchy to files explicitly included by TypeScript configuration
• preserve nested negation rules and keep askr.analyze.exclude as an additive analyzer-only filter
• exercise the behavior through both analyzer fixtures and the packed CLI candidate
• document discovery behavior and add the typed ignore 7.0.6 runtime dependency

Compatibility

This changes analyzer discovery only: gitignored source files are no longer diagnosed by default. There is no public API or flag change, and existing askr.analyze.exclude configuration remains supported. The package version remains 0.2.3; no package was published.

TDD evidence

Before the implementation, the regression reported all seven explicitly included fixture files, including ignored root, nested, and legacy-tree files. After the implementation, it reports only the three non-ignored/re-included files. A nested-workspace regression also proves project-root rules apply below the selected workspace.

Validation

• focused .gitignore regressions: 2 passed, three consecutive runs
• npm run check: 20 files / 276 tests; lint, typecheck, coverage, changelog, build, docs, publint, and pack all passed
• npm run test:peer-floor: packed CLI candidate passed against the minimum supported Askr peer and excluded an ignored source file
• npm run test:templates: all packed templates passed
• npm run bench:analyze: 50 files 43.396 ms, 250 files 199.77 ms, five workspaces 210.57 ms; all thresholds passed
• git diff --check: passed

Dependency review

The lockfile adds only ignore 7.0.6 and its root dependency entry. npm outdated reports only @types/node 26.4.0; it is a minor update from 26.3.0 and is intentionally excluded.

Hosted validation

CI run 33247571500 passed on the exact head SHA 4f68432b3532a99b46148754b2d8482694ef8ab9: dependency audit, Ubuntu, Windows, macOS, packed minimum-peer, packed templates, and performance gate all succeeded. Two complete main...head review passes found no remaining defects, and GitHub readback found no comments, reviews, or unresolved threads.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.