Tapp 0.17.5

Web field-report fixes: mobile rendering, honest stop reasons, and a complete link audit.

• Render any web command at a Playwright device profile (--device "iPhone 13") or explicit --viewport 390x844; open gains --full-page screenshots.
• Exploration reports why it stopped: completed is reserved for an exhausted action budget, a drained small surface reports no-unexplored-in-scope-controls, and wall-clock exhaustion is labeled honestly. The JSON report carries a timestamped per-action trace.
• The link audit now catches anchors to missing ids, outbound hosts that do not resolve, and mailto: domains that cannot receive email — deterministically — and flags outbound pages returning 200 with unmistakable "content isn't available" copy as an advisory that never gates.
• <details>/<summary> disclosure controls are exercised; the scope block states the same-origin crawl boundary and reports catalogued-but-unsubmitted forms as not checked.
• The originating field report's eight-case fixture page ships as an end-to-end regression test, passing 8/8.

The core engine remains MIT licensed and runs in infrastructure you control.