fix(dev): guard driver submodule checkout

[KurosawaGeeker]

Summary

• fail fast when apps/driver is uninitialized or checked out at a commit different from the repository gitlink
• run the guard before local dev, build, repository checks, and API deployment
• enable recursive submodule behavior during just setup and document the recovery command

Root cause

A main-repository update changed the expected Driver protocol and gitlink, while an existing local apps/driver checkout remained on an older commit. Git reported only a modified submodule, so the API and Driver started with incompatible control-socket behavior and failed after a 30-second timeout.

The guard compares the index gitlink with the actual Driver HEAD and stops immediately with an actionable git submodule update command.

Validation

• env -u ANTHROPIC_API_KEY -u AGENT_DRIVER_LIVE_ANTHROPIC_API_KEY bun run check
• API tests: 916 passed
• Driver tests: 156 passed, 3 skipped
• Web tests: 121 passed
• formatting, docs links, lint, typecheck, and GraphQL codegen checks passed

Generated files

No generated files, GraphQL codegen output, or DB baseline changes are included.