v0.10.2 — close live fuzz-review findings (scoped classification, hits guard, md injection)

v0.10.2 — closing the live fuzz-review findings

A 46-agent fuzz/review pass ran against a 0.9.0 checkout, so most of its HIGH findings (failCount mixing, positional eviction, mtime locks, recordHit-before-deny, settings clobber, unpinned CI) were already fixed in 0.10.0/0.10.1 — re-confirmed fixed, not re-patched. Four findings genuinely reproduced on HEAD and are closed here, each with an adversarial test:

• Cross-toolchain false FAIL. A passing pytest run whose log contained a jest-style FAIL banner — or Retrying 1 failed attempt prose — was misclassified as a failure (and would have wrongly blocked the correct fix on a later session). Classification is now scoped to the runner's own patterns via the command.
• loadHits crash. A valid-JSON-but-not-array hits.json (e.g. {}) crashed rl stats/rl report; now coerced to [].
• Markdown report injection. rl report markdown embedded ledger text verbatim; headings/code-fences from a crafted preview are now neutralized (the HTML renderer already escaped).

100 tests - benchmark green - zero dependencies. The honest pattern holds: ship fast, review adversarially, and let the changelog keep its own ledger.