Add submodule push rule to AGENTS.md

AGENTS.md

@@ -319,6 +319,27 @@ sudo incus snapshot create <container> pre-change-$(date +%Y%m%d%H%M%S)
 - **GIT WORKFLOW** — always push to ALL repositories
 - **0 warnings, 0 errors** — loop until clean
 
+### 🚨 FUNDAMENTAL: Submodule Push Rule (MANDATORY)
+
+**Every time you push the main repo, you MUST also push ALL submodules!**
+
+```bash
+# After ANY main repo push, ALWAYS run:
+cd botserver && git push origin main && git push alm main
+cd ../botui && git push origin main && git push alm main
+cd ../botlib && git push origin main && git push alm main
+# ... repeat for ALL submodules
+```
+
+**Why:** CI builds based on submodule commits. If submodule isn't pushed, CI deploys old code.
+
+**Checklist before pushing:**
+- [ ] botserver pushed?
+- [ ] botui pushed?
+- [ ] botlib pushed?
+- [ ] All other submodules pushed?
+- [ ] Main repo points to new submodule commits?
+
 ---
 
 ## 🔐 Zitadel Setup (Directory Service)