Repository navigation
Fix: /download/ (and any real-file page) false-flagged as a violation — the document hash was compared to the SPA shell's manifest key. The doc now resolves its own key (pathname → dir-index → shell fallback), same as the service worker.
Verified against the live manifest: /download/index.html and /index.html hashes both match — the earlier '✗ /index.html (hash mismatch)' on /download/ was this false positive.