fix(shell): run autoSyncState before docker compose up (#158)

[skulidropek]

Summary

• Moves autoSyncState() before runDockerUpIfNeeded() in runCreateProject (create-project.ts)
• Adds test file create-project-state-sync-order.test.ts with 1 new test

Problem

codex fails to start inside Docker containers with "Error loading configuration: No such file or directory (os error 2)":

1. docker compose up starts with bind-mount: .orch/auth/codex → /home/dev/.codex
2. autoSyncState() runs after Docker is up — calls git reset --hard on the host
3. git reset --hard deletes and recreates .orch/auth/codex → new inode
4. Docker bind-mount retains the old inode (now points to deleted directory)
5. Inside container: /home/dev/.codex is empty → codex cannot find config.toml

Fix

Reorder: sync state first, then start Docker — ensures .orch/auth/codex inode is stable when docker compose up mounts it.

Invariant: ∀p: synced(p) ∧ stable_inode(.orch/auth/codex, p) → valid_mount(docker_up(p))

Test plan

• New test create-project-state-sync-order.test.ts verifies ∀p: stateSyncProbeIndex(p) < dockerComposeUpIndex(p) — git rev-parse (autoSyncState probe) appears before docker compose up in recorded command sequence
• All 82 existing tests pass
• Typecheck clean
• Lint clean (0 errors)

Closes #158

🤖 Generated with Claude Code