The console log no longer crashes the run when the scanned directory is
read-only or on a flaky external drive: the log location is probed and falls
back to the temp dir (console-only if neither is writable), and a resilient file
handler disables itself on the first write failure instead of flooding tracebacks
and crippling throughput on a large scan. No API or detection-logic change.