Fixed
doctornow validates cleanup-plan config sidecars against their matching plan instead of misclassifying valid sidecars as malformed plans.
This preserves existing AgentRinse state and reports malformed, orphaned, or digest-mismatched sidecars separately from cleanup plans.