docs(reports): point the reports index and work log at the vuln issues

The audit's vulnerability clusters are now filed on Gitea as
dank/command-center#67..#77, one issue per host-and-package cluster. Link
them from omp-docs/reports/index.md and record the PR/issue references on
the matching log.md entry, so a reader of the audit can find the open work
without leaving the bundle.

omp-docs/log.md

@@ -39,7 +39,11 @@ the OpenSSH advisory count (0 → **5** unpatched CVEs; the first query omitted
 
 Laws: **an empty OSV response is not a clean bill** — verify the query shape against the distro
 tracker before writing "0 advisories"; and **a version quoted from a subagent gets re-probed
-before it enters a report**, this being the second mis-attribution the audit caught.
+before it enters a report**, this being the second mis-attribution the audit caught. Merged as PR
+[dank/command-center#66](https://gitea.franksdank.cloud/dank/command-center/pulls/66); the remediation
+clusters are filed as issues
+[dank/command-center#67](https://gitea.franksdank.cloud/dank/command-center/issues/67)–#77, listed in
+[reports/index.md](reports/index.md).
 
 ### reviewing a day of work, and finding checks that lie