fix: build scripts use git reset --hard before pull to recover from dirty state

Cargo.lock changes from Docker builds caused pull conflicts. Now uses
reset --hard + clean -fd to guarantee clean state before pulling.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

scripts/build-and-notify.sh

@@ -51,7 +51,8 @@ trap 'notify "WZP Android build FAILED! Check /tmp/wzp-build.log"' ERR
 if [ "$DO_PULL" = "1" ]; then
     echo ">>> Pulling latest..."
     cd "$BASE_DIR/data/source"
-    git checkout -- . 2>/dev/null || true
+    git reset --hard HEAD 2>/dev/null || true
+    git clean -fd 2>/dev/null || true
     git pull origin feat/android-voip-client 2>&1 | tail -3
 fi
 

scripts/build-linux-docker.sh

@@ -52,7 +52,8 @@ trap 'notify "WZP Linux build FAILED! Check /tmp/wzp-linux-build.log"' ERR
 if [ "$DO_PULL" = "1" ]; then
     echo ">>> Pulling latest..."
     cd "$BASE_DIR/data/source"
-    git checkout -- . 2>/dev/null || true
+    git reset --hard HEAD 2>/dev/null || true
+    git clean -fd 2>/dev/null || true
     git pull origin feat/android-voip-client 2>&1 | tail -3
 fi