Fixed
- ghost: false positives in Python (ref_count - def_count bug, broadened attribute tracking)
- trace/calltrace: C++ symbols return empty chains (added brace-matching + _cpp_find_callees)
- tags --stats: timeout on large projects (added --max-files N, default 10000)