[chrisknvidia]

Fixes #889.

E5 treats literal cloud-to-local downloads as exfiltration and fails --fail-on-findings. Omit only individually proved AWS/GCS downloads through supported cp, non-deleting sync, or rsync forms.

Reuse the existing bounded shell helpers, consume option values with one iterator, and index only the proof's first 4,097 characters. Upload occurrences retain their locations. Moves, deletion flags, streams, dynamic operands, unknown options, compound commands and uncertain setup retain findings. SDK rules, scoring and exit policy are unchanged.

Validation on 50376f4:

• All 87 existing focused tests pass from source and again against the installed wheel; no test files changed. Ruff, formatting and affected-module mypy pass.
• 24 installed-console invocations and three real MCP stdio scans cover JSON/SARIF locations, strict gates, baselines, recursive reports and report files. All 127 packaged files match source, wheel and installation.
• Repeated architecture/code/manual security review and behavior comparisons pass, including option ownership and CRLF/context-limit cases.

Local qualification is complete; hosted CI is still running. No cloud commands, model-provider calls or customer production runs were performed.