feat: tg-client skill + lint fixes (#3)

Fix 5 bugs: flush_now on clear, symlink re-verify on fast-path, lock ref leaks on timeout, fig=None init

Fix 6 confirmed bugs: crash-recovery flush, lock holder tracking, UX timeout, task cancel, create_task, file handle safety

Fix 8 security/correctness/reliability issues across bot modules

Fix 6 bugs: flood backoff cap, dead code removal, lock race, SDK timeouts, version parsing, session_id drop

fix: clear scope._tasks to break _deliver_cancellation busy loop

fix: stop hard-killing subprocess after clean disconnect (root cause of 100% CPU)

fix: sweep _deliver_cancellation at startup and patch scopes to prevent re-scheduling

test: update tests for new module structure

feat: /reload command, [react:emoji] directives

chore: remove dead code — bot/core/, events.py, exceptions.py

refactor: decompose handlers.py into focused modules

fix: high-severity reliability issues

fix: critical bugs — ImportError, deadlock, security bypass

Fix anyio _deliver_cancellation infinite CPU busy loop