docs(reports): land the fleet security audit with its per-host vuln passes

Fold the Dankclaw and Dankserver vulnerability passes into
fleet-security-audit-2026-10-21.html: the stub "Advisory cross-reference (in
progress)" section becomes the full matrix (host advisories, GHSA coverage,
image-vulnerability matrix, no-advisory census, observed-without-credentials
rows for the two livingroom hosts) and the header links the two working files,
which move into omp-docs/reports/ with an index of their own.

Correct three figures the audit had wrong, all found by re-probing: the
mutable-tag census (17 -> 19 Dankclaw manifests / 17 unique references, +4 on
Dankserver), the Dankserver OpenSSH advisory count (0 -> 5 unpatched CVEs; the
first OSV query omitted the version epoch, and OSV answers "0 vulns" rather
than "unknown" for a malformed purl), and the Plex version ("12.1.0" is
Jellyfin's - the live container reports 1.43.5.11029-6bf8af3f0-ls329). Also
repair a malformed <code> tag in F1's evidence cell.

kb-lint and kb-coverage both report 0 issues; index.md gains the Reports
section and log.md the matching entry.

omp-docs/index.md

@@ -65,6 +65,12 @@ dotfiles pruning/adoption session.
 Architecture decision records — the choices that are no longer up for debate,
 with what was rejected and why. Currently empty; the format rule is in its index.
 
+## [Reports](reports/index.md)
+
+Audits and vulnerability passes kept as dated artifacts — the 2026-10-21 fleet
+security audit with its per-host vuln pages, and the 2026-09-28 sleep/wake
+investigation.
+
 ## [Change history](log.md)
 
 Chronological update history of this bundle — incident lessons land here first,