ken-audit

Whole-repo audit for Thompson-mode violations. Like ken-review, but scans the entire codebase instead of a diff: a ranked list of what to rewrite, delete, or take back into the trusted base. Use when the user says "audit this codebase", "audit for rot", "what should be rewritten in this repo", "find the rot", "ken-audit", or "/ken-audit". One-shot report, does not apply fixes.