Finding catalog

Status: Draft stub.

Scope: finding codes, severity, locations, blocking behavior, downgrade eligibility, and remedies.

To complete: build a versioned public index of the canonical findings catalog and link verified remedies. Do not invent codes or infer eligibility from severity alone.