cleanup: CLI simplify pass, correctness fixes, core dedups, scan split, docs sync (−587 net lines) #354

Job	Run time
lint-ecosystems	6s
test-release	24m 44s
test (macos-latest)	9m 58s
clippy	42s
coverage	10m 18s
coverage-docker (pypi)	6m 4s
e2e-docker (pypi)	4m 28s
e2e-docker (golang)	4m 4s
e2e-docker (gem)	4m 24s
coverage-docker (golang)	5m 15s
coverage-docker (maven)	5m 49s
e2e-docker (deno)	4m 14s
test (windows-latest)	26m 14s
e2e-docker (cargo)	4m 18s
coverage-docker (npm)	5m 29s
coverage-docker (nuget)	5m 34s
coverage-docker (deno)	5m 10s
e2e-docker (composer)	4m 18s
e2e-docker (nuget)	4m 42s
coverage-docker (cargo)	5m 24s
setup-matrix (pypi)	4m 18s
coverage-docker (composer)	5m 43s
setup-matrix (composer)	3m 13s
e2e-docker (maven)	4m 26s
dispatch-tests	12s
setup-matrix (maven)	5m 35s
setup-matrix (npm)	3m 54s
setup-matrix (deno)	3m 2s
e2e-docker (npm)	4m 20s
setup-matrix (nuget)	3m 20s
coverage-docker (gem)	5m 18s
test (ubuntu-latest)	11m 2s
setup-matrix (golang)	2m 56s
setup-matrix (cargo)	3m 15s
setup-matrix (gem)	3m 16s
coverage-merge	29s
e2e (ubuntu-latest, e2e_vendor_composer_build)	1m 40s
e2e (ubuntu-latest, e2e_maven)	1m 36s
e2e (ubuntu-latest, e2e_cargo)	1m 34s
e2e (ubuntu-latest, e2e_golang)	1m 32s
e2e (macos-latest, e2e_safety_cargo_build)	1m 37s
e2e (ubuntu-latest, e2e_vendor_gem_build)	1m 37s
e2e (ubuntu-latest, e2e_nuget)	1m 33s
e2e (ubuntu-latest, e2e_safety_cargo_build)	1m 32s
e2e (macos-latest, e2e_safety_pnpm)	1m 41s
e2e (ubuntu-latest, e2e_composer)	1m 33s
e2e (windows-latest, e2e_safety_pnpm)	3m 47s
e2e (ubuntu-latest, e2e_safety_pnpm)	1m 45s
e2e (windows-latest, e2e_safety_cargo_build)	3m 23s
	3h 50m 24s

Provide feedback