Honor row-selection controls in audit recipe outputs

[Widthdom]

Summary

• Apply --first-per-file and deterministic --sample to row-producing audit recipe outputs before effective result limits.
• Report selection metadata consistently in aggregate JSON, compact JSON, NDJSON, and issue-draft sources; preserve selectors in generated replay commands.
• Suppress unsafe continuation cursors and reject incoming --cursor with recipe row selectors.
• Reject row selectors for non-row recipe shapes and reject grouped-only --per-file-limit for recipe execution.

Root cause

Recipe row collectors applied only the effective result limit and did not call the shared search-output selection path, so accepted selectors were silently ignored.

Validation

• Debug and Release solution builds: 0 warnings, 0 errors
• Affected recipe/console tests: 313 passed on net8.0 and 313 passed on net9.0
• make lint
• changelog fragment validation (46 fragments)
• cdidx status --check --json: fresh and workspace-matched
• Two-round Codex adversarial review completed; all findings addressed, including selector-aware fetch sizing, cursor safety, replay preservation, and incoming cursor rejection

Documentation

• Updated English and Japanese user, developer, and testing guidance
• Added changelog.d/unreleased/4759.fixed.md

Fixes #4759