quality: add exclude paths and config overrides

[fall-out-bug]

Summary

Adds configurable exclusions and thresholds for quality checks (size, complexity, coverage).

Changes

Size check

• Exclude .tmp/ and /sdp/ from file size walk (external/vendor paths)

Complexity check

• Exclude .tmp/, /sdp/, vendor/, node_modules/ from gocyclo output
• Add complexity_exclude and complexity_threshold to .sdp/config.yml
• Load threshold from config (default 10)

Coverage check

• Add coverage_exclude to config
• When set: run go list ./..., filter packages, then go test <pkgs> -cover
• Allows excluding cmd/ or integration-heavy packages from coverage gate

Config schema

quality:
  coverage_exclude: ["cmd/", "internal/runtime"]
  complexity_threshold: 40
  complexity_exclude: ["cmd/"]

Use case

Projects like sdp_dev have:

• .tmp/beads-src (external dependency) — inflates size/complexity
• cmd/ packages (integration-style) — low coverage, high complexity
• sdp/ submodule — should not be checked

This PR lets such projects pass quality gates without refactoring external code.

Made with Cursor

[github-actions]

SDP Verification ❌

Status: Verification failed

Gate Results

Gate	Status
Passed	1
Failed	1
Total	2

Evidence Summary

Chain Integrity

⊘ Evidence chain verification not required

---

View full details in Workflow Run