feat: production audit + add init/clone/reflog/submodule/bisect IPC and CI split

[hoangsvit]

Motivation

• Provide a production-readiness audit and roadmap toward GitKraken parity to prioritize product, UX, and enterprise gaps.
• Add missing core repository entrypoints and maintenance workflows (init/clone/reflog/submodule/bisect) as Tauri/Rust IPC so the frontend stays thin and stable.
• Expose typed contracts to the frontend and tighten CI so PRs run fast checks while packaging runs only for non-PR releases.

Description

• Added a production audit document at docs/production-audit.md that summarizes feature gaps, refactors, and a multi-stage roadmap.
• Implemented repository commands init_repository and clone_repository in src-tauri/src/commands/repository.rs with validation for paths, initial branch, branch/depth clone options, and safe destination checks.
• Introduced src-tauri/src/commands/maintenance.rs with list_reflog, list_submodules, update_submodules, and bisect lifecycle commands (start_bisect, mark_bisect, reset_bisect, get_bisect_state).
• Registered new commands in the Tauri invoke handler (src-tauri/src/lib.rs) and added pub mod maintenance; to src-tauri/src/commands/mod.rs.
• Added corresponding Rust models (ReflogEntry, SubmoduleInfo, BisectState) to src-tauri/src/models/git.rs and exposed matching TypeScript types and service calls in src/types/git.ts and src/services/gitService.ts.
• Optimized CI (.github/workflows/ci.yml) by splitting fast PR validation (validate job) from cross-platform packaging (package job), enabling Node and Rust caching and avoiding building desktop bundles on pull requests.

Testing

• Ran cargo fmt --manifest-path src-tauri/Cargo.toml (succeeded).
• Ran git diff --check (no whitespace/build issues reported).
• Ran npm run typecheck (tsc --noEmit) and npm run build (vite build) (both succeeded).
• npm run tauri:check / cargo check was attempted but is blocked locally due to a missing system dependency (glib-2.0); installing system packages via apt failed in the environment due to network/proxy 403 errors, so full backend checks are currently blocked.

---

Codex Task

[qodo-code-review]

Qodo reviews are paused for this user.

Troubleshooting steps vary by plan Learn more →

On a Teams plan?
Reviews resume once this user has a paid seat and their Git account is linked in Qodo.
Link Git account →

Using GitHub Enterprise Server, GitLab Self-Managed, or Bitbucket Data Center?
These require an Enterprise plan - Contact us
Contact us →

[github-actions]

GitPilot build artifacts are ready

One CI workflow run built all 3 desktop apps: open workflow run.

Download links:

• windows: gitpilot-windows
• macos: gitpilot-macos
• linux: gitpilot-linux