feat: add deterministic evidence-linked findings

[karngyan]

Summary

• add model-free repeated command-failure and explicit user-correction detectors
• normalize common shell aliases, command whitespace, project prefixes, and failure exit codes
• score recurrence with inspectable integer arithmetic and explicit success/compliance counterexamples
• define Evidence Packet v0.1 with stable finding IDs and exact AEP evidence lineage
• add an anonymized evaluation corpus proving stable output, order independence, project selection, and honest silence below threshold

Verification

• mise run check
• demo corpus: exactly 2 findings, each with 3 supporting events and 1 counterexample
• threshold above corpus recurrence: 0 findings
• 3 unclassified corrections: 0 inferred correction findings