Cap the (re-decoding) spectrum detail cards to the worst-scoring 200 flagged
files so --format html stays fast on a full-library scan. The triage table still
lists every file; a banner names the cap. No API or detection-logic change.