v1.9.432 — drift --auto-fix recursion depth guard (UR-0131 remainder)

Defensive guard: drift --auto-fix recursion now bounded to one pass via _noAutoFix, removing dependence on the fragile invariant that audit --fix always clears the security signal. Verified not currently reachable but hardened. selftest 176 to 177, e2e 358/358.