fix(api): unconditional /git/file window cap; defer Telegram sends after commit; docs/map periodic re-index

_compute_file_range now caps any resolved window at _FILE_MAX_LINES
instead of only the exact whole-file shape, closing the near-whole-file
bypass. Telegram sends ride a generalized after-commit outbox
(defer_after_commit over the F107 machinery) so a slow Bot API can no
longer hold the caller's transaction open; TelegramClient grows an
abstract close(). The KB update loop iterates AUTO_INDEX_DIRS so
docs/map edits re-index without a restart. PR-label application
catches all exceptions per its never-raises contract, and pr_merge's
CEO-only message names the resolved branch.

tests/unit/api/test_git_file_range.py

@@ -52,3 +52,19 @@ class TestComputeFileRange:
             total=0, line=None, context=10, start=None, end=None
         )
         assert (s, e_, trunc) == (1, 1, False)
+
+    def test_near_whole_file_explicit_range_still_capped(self) -> None:
+        # start=1, end=total-1 is not the exact-whole-file shape, but the
+        # resolved window is still oversized and must be capped.
+        total = 50000
+        s, e_, trunc = _compute_file_range(
+            total=total, line=None, context=10, start=1, end=total - 1
+        )
+        assert (s, e_, trunc) == (1, _FILE_MAX_LINES, True)
+
+    def test_oversized_line_context_window_is_capped(self) -> None:
+        total = 10000
+        s, e_, trunc = _compute_file_range(
+            total=total, line=5000, context=3000, start=None, end=None
+        )
+        assert (s, e_, trunc) == (2000, 2000 + _FILE_MAX_LINES - 1, True)