feat(worktrees): worktree management popup (list, switch, create, remove, lock)

Adds a Worktrees popup (Shift+W, available from any tab) to manage git
worktrees without leaving gitui:

- list the primary + linked worktrees with branch / path / lock / valid
  markers (* marks the current one)
- switch to the selected worktree (Enter), reusing the existing repo-switch
  flow
- create a worktree at a path (c) with a new branch named after the final
  path component; missing parent dirs are created
- remove a worktree (Shift+D) via a y/n confirmation; refused if it is the
  current tree, is locked, or has uncommitted / staged / untracked changes
- lock / unlock a worktree (l)

Backend is git2-native in asyncgit/src/sync/worktree.rs (get_worktrees /
create_worktree / remove_worktree / toggle_worktree_lock) with tests; UI in
src/popups/{worktrees,create_worktree}.rs.

Also fixes a pre-existing bug where the first keystroke after switching
worktree/submodule was dropped, by sharing the input reader across app
restarts.

Squashed from branch feat/worktrees (PR gitui-org#2995).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01BMQxBdr5f3B3jmDtdvGtTu

Author: stevenpollack

CHANGELOG.md

@@ -9,6 +9,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Added
 * support x509 commit signing [[@kaden-l-nelson](https://github.com/kaden-l-nelson)] ([#2514](https://github.com/gitui-org/gitui/issues/2514))
+* worktrees popup: list worktrees and switch between them ([Shift+W])
+* worktrees popup: create a new worktree with a new branch ([c] from the worktrees list)
+* worktrees popup: remove a worktree ([Shift+D], refused if it is dirty or locked) and lock/unlock it ([l])
 
 ### Changed
 * use [tombi](https://github.com/tombi-toml/tombi) for all toml file formatting
@@ -17,6 +20,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 * support rewording non-HEAD commits when `commit.gpgsign` is enabled (gpg format only) [[@guerinoni](https://github.com/guerinoni)] ([#2959](https://github.com/gitui-org/gitui/pull/2959))
 
 ### Fixes
+* first keystroke after switching to a submodule or worktree was dropped
 * crash when opening submodule ([#2895](https://github.com/gitui-org/gitui/issues/2895))
 * when staging the last file in a directory, the first item after the directory is no longer skipped [[@Tillerino](https://github.com/Tillerino)] ([#2748](https://github.com/gitui-org/gitui/issues/2748))
 * index-out-of-bounds panic when unstaging lines near the end of a diff ([#2953](https://github.com/gitui-org/gitui/issues/2953))

CLAUDE.md

@@ -0,0 +1,58 @@
+# gitui — working notes for Claude
+
+gitui is a Rust TUI git client. Cargo **workspace**: root crate `gitui` (the `src/` TUI binary) +
+members `asyncgit` (git logic over `git2`/`gix`), `filetreelist`, `git2-hooks`, `git2-testing`,
+`scopetime`. MSRV **1.88** (`Cargo.toml` `rust-version`, `.clippy.toml` `msrv`, CI matrix — keep
+all three in sync if ever bumped).
+
+## Feedback loop (run these — the reviewer here does not read Rust, so tooling IS the review)
+
+- **Fast inner loop while editing:** `cargo check -p asyncgit` (backend) / `cargo check` (whole
+  workspace). Never iterate with `--release` — LTO + `opt-level="z"` makes it very slow.
+- **Format before every check:** `cargo fmt`. Formatting is unusual (`rustfmt.toml`:
+  `max_width = 70`, `hard_tabs = true`) — hand-written code almost never matches, and
+  `cargo fmt -- --check` is a CI gate.
+- **Full gate before declaring done / committing:** `make check`
+  = `fmt` (`cargo fmt -- --check`) + `clippy` (`cargo clippy --workspace --all-features`) +
+  `test` (`cargo nextest run --workspace`) + `sort` (`tombi format --check`) + `deny`
+  (`cargo deny check`). CI calls the same `make` targets, so green locally ≈ green CI.
+- **Subset fallback** if a tool is missing: `cargo fmt -- --check` +
+  `cargo clippy --workspace --all-features` + `cargo test --workspace` (plain `cargo test` works;
+  it just also runs doctests that nextest skips).
+- **Run a single crate's tests:** `cargo test -p asyncgit <name_filter>`.
+
+Required tooling: `cargo-nextest`, `cargo-deny`, `tombi` (installed via mise), plus `python`,
+`gpgsm`/`gpg`, `openssl`, `perl`, a C compiler (vendored OpenSSL + bundled libgit2 build from
+source on first compile — the first build is slow, later ones are cached).
+
+## Hard rules clippy enforces (these fail the build, not just warn)
+
+Crate roots carry `#![deny(clippy::all, perf, nursery, pedantic, cargo)]` plus bans below.
+- **No `unwrap` / `expect` / `panic!` in production code** — use `?`, `ok_or(...)`,
+  `unwrap_or_default()`, `map_or(...)`. (`unwrap`/`expect` are fine in `#[cfg(test)]` code.)
+- `asyncgit` has `#![forbid(missing_docs)]` — **every `pub` item needs a `///` doc comment**.
+- `#![forbid(unsafe_code)]` in the binary crate.
+
+## Other gotchas
+
+- **UI output is snapshot-tested with `insta`** (`src/snapshots/*.snap`). If you change rendered
+  output, tests fail with a diff — review and accept via `cargo insta review` / `cargo insta
+  accept`, then commit the updated `.snap` files. (Install once: `cargo install cargo-insta`.)
+- **CHANGELOG.md** must gain an entry under `## Unreleased` (`Added`/`Changed`/`Fixes`) or the CI
+  `log-test` job fails. Format: Keep-a-Changelog, with issue/PR links.
+- Only the `stable` and `1.88` CI rows gate (nightly is `continue-on-error`). `cargo +nightly
+  udeps` runs in CI but not in `make check`, so **don't add unused dependencies**.
+- Production code never shells out to the `git` binary; use `git2`/`gix`. The only
+  `Command::new("git")` calls live in test helpers (`debug_cmd_print` in `asyncgit/src/sync/mod.rs`).
+
+## Where things live (patterns to copy)
+
+- Sync git ops: `asyncgit/src/sync/<feature>.rs`, re-exported from `asyncgit/src/sync/mod.rs`. Each
+  op: `pub fn f(repo_path: &RepoPath, ...) -> Result<T> { scope_time!("f"); let repo =
+  repo(repo_path)?; ... }`. Test helpers (`repo_init`, `debug_cmd_print`) in `sync/mod.rs::tests`.
+- Popups (Branches/Submodules/etc.): `src/popups/<name>.rs`, registered in `src/popups/mod.rs` and
+  the `setup_popups!` macro in `src/app.rs`; opened via an `InternalEvent` in `src/queue.rs`.
+- Components implement `Component` + `DrawableComponent` (`src/components/mod.rs`). Non-commit list
+  views use `VerticalScroll` + `ui::scrolllist::draw_list` (see `src/popups/submodules.rs`).
+- Keybindings: `src/keys/key_list.rs` (`KeysList` struct + `Default`). Command/help strings:
+  `src/strings.rs`.

asyncgit/src/sync/mod.rs

@@ -34,6 +34,7 @@ mod submodules;
 mod tags;
 mod tree;
 pub mod utils;
+mod worktree;
 
 pub use blame::{blame_file, BlameHunk, FileBlame};
 pub use branch::{
@@ -108,6 +109,10 @@ pub use utils::{
 	get_head, get_head_tuple, repo_dir, repo_open_error,
 	stage_add_all, stage_add_file, stage_addremoved, Head,
 };
+pub use worktree::{
+	create_worktree, get_worktrees, remove_worktree,
+	toggle_worktree_lock, WorktreeInfo,
+};
 
 pub use git2::ResetType;