feat: separate URL target and local host findings in scan output

[jonathansantilli]

Summary

• separate URL scan findings into two explicit groups in terminal output:
  • requested URL target findings
  • additional local host findings
• always show requested URL target results first
• reorder findings in scan and skills-wrapper flows so target-origin findings are prioritized for rendering/TUI display
• improve URL result note wording to explicitly call out local host paths (~/* and absolute paths)
• add unit tests for partition/reorder logic and terminal rendering order

Verification

• npm run lint
• npm test -- tests/report/requested-target-findings.test.ts tests/reporter/terminal.test.ts tests/commands/skills-wrapper.test.ts tests/cli/scan-command.test.ts
• npm run typecheck
• npm run build