Fixes repository audit discovery and output (#12): uses tracked plus non-ignored untracked Git inventory, preserves tracked ignored-looking paths and explicit canonical owners, bounds non-Git fallback traversal, and adds compact machine-readable summaries backed by complete report artifacts. Default full JSON remains compatible, and privacy scanning retains its existing tracked-file coverage.