docs: add doc comments to touched retry-scope functions

CodeRabbit's docstring-coverage check flagged functions touched by this diff as
undocumented. Add Go doc comments to buildRetryStrategyLocalScope and the two
retry tests it did not already cover.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Signed-off-by: Liron Shabtai <lirons@legitsecurity.com>

Author: lirons-legit

workflow/controller/operator.go

@@ -2140,6 +2140,10 @@ func getRetryNodeChildrenIds(node *wfv1.NodeStatus, nodes wfv1.Nodes) []string {
 	return childrenIds
 }
 
+// buildRetryStrategyLocalScope returns the lastRetry.* variables for a retry node — the retries index,
+// the last retried child's exit code, status, duration, and message, and the exit-code history of all
+// previous attempts — for use in retryStrategy.expression. It returns an empty scope when the node has
+// no retried children yet.
 func buildRetryStrategyLocalScope(node *wfv1.NodeStatus, nodes wfv1.Nodes) map[string]any {
 	localScope := make(map[string]any)
 

workflow/controller/operator_test.go

@@ -10195,6 +10195,8 @@ func TestOperatorRetryExpression(t *testing.T) {
 	assert.Equal(t, "retryStrategy.expression evaluated to false", retryNode.Message)
 }
 
+// TestBuildRetryStrategyLocalScope verifies buildRetryStrategyLocalScope populates the lastRetry.*
+// variables from a retry node's child attempts.
 func TestBuildRetryStrategyLocalScope(t *testing.T) {
 	wf := wfv1.MustUnmarshalWorkflow(operatorRetryExpression)
 	retryNode, err := wf.GetNodeByName("retry-script-9z9pv[1].retry")

workflow/validate/validate_test.go

@@ -4212,6 +4212,8 @@ spec:
       args: ["{{= 2 + len(filter(split(lastRetry.exitCodes, ','), {# == '137'})) }}"]
 `
 
+// TestLastRetryExitCodesResolvesInValidation verifies that a retryStrategy template referencing
+// lastRetry.exitCodes in an expression passes validation — i.e. the variable is registered in scope.
 func TestLastRetryExitCodesResolvesInValidation(t *testing.T) {
 	err := validate(logging.TestContext(t.Context()), lastRetryExitCodesInExpression)
 	require.NoError(t, err)