Deterministic audit-section provider — emits a markdown fragment (fan-in hotspots, underdocumented public symbols, exit/panic reachability) from the arch-index SQLite index.