Fix dead-code reachability for framework runtime patterns

[orenlab]

Summary

This PR reduces false-positive dead-code findings for runtime-managed Python code by extending CodeClone’s reachability model with deterministic, evidence-based framework and dynamic-dispatch patterns.

What changed

• Treat FastAPI/Starlette route decorators, including typed wrapper decorators over router methods, as runtime entrypoints.
• Treat Aiogram router observer decorators as runtime handler registration.
• Treat Starlette BaseHTTPMiddleware.dispatch, SQLAlchemy TypeDecorator hooks, Pydantic validators/computed fields, ABC/protocol contracts, public exports, lazy exports, and guarded dynamic getattr(..., "method") dispatch as reachability evidence where the pattern is explicit.
• Exclude vendored node_modules Python files from default project scanning.
• Keep the behavior deterministic and report-only where appropriate: this does not add broad name-only heuristics or hidden framework magic.

Validation

• uv run pytest --cov=codeclone --cov-report=term-missing --cov-fail-under=99 --cov-report=xml
• uv run pre-commit run --all-files
• uv run codeclone . --ci --json .cache/codeclone/report.json

[github-actions]

CodeClone Review

✅ Passed · Health 90/100 (A) · Baseline ok · Cache miss · CodeClone 2.0.2

Review snapshot

Area	Signal	Review note
Clones	0 total, 0 new, 0 known	no new clone debt reported
Quality	CC max 20, CBO max 8, LCOM4 max 3, overloaded 11	structural metric snapshot
Dependencies	avg 4.0, p95 12, max 16, cycles 0	acyclic
Coverage Join	not joined	no coverage.xml facts in this report
Security Surfaces	59 surfaces, 4 categories, 29 production	report-only boundary inventory
API Surface	2252 symbols, 217 modules	0 breaking, 0 added
Dead code	0 high-confidence, 1 suppressed	clean

Review focus

• Treat 29 production security surface(s) as review-first boundary code when touched.
• Review 11 overloaded module candidate(s) when they intersect this PR.

_{Security Surfaces are report-only capability inventory, not vulnerability claims. Generated by CodeClone}