fix: skip package-lock.json in pr-push unless package.json changed (#2585)

.claude/commands/dyad/pr-push.md

@@ -28,6 +28,7 @@ Commit any uncommitted changes, run lint checks, fix any issues, and push the cu
    If there are uncommitted changes:
    - **When in doubt, `git add` the files.** Assume changed/untracked files are related to the current work unless they are egregiously unrelated (e.g., completely different feature area with no connection to the current changes).
    - Only exclude files that are clearly secrets or artifacts that should never be committed (e.g., `.env`, `.env.*`, `credentials.*`, `*.secret`, `*.key`, `*.pem`, `.DS_Store`, `node_modules/`, `*.log`).
+   - **Do NOT stage `package-lock.json` unless `package.json` has also been modified.** Changes to `package-lock.json` without a corresponding `package.json` change are spurious diffs (e.g., from running `npm install` locally) and should be excluded. If `package-lock.json` is dirty but `package.json` is not, run `git checkout -- package-lock.json` to discard the changes.
    - Stage and commit all relevant files with a descriptive commit message summarizing the changes.
    - Keep track of any files you ignored so you can report them at the end.