PHLEGM v4 Audit Completion Checkpoint - 2026-09-27

- Finishes the user-facing audit path around the existing generic audit.lib implementation.
- Adds canonical AUDIT [CARTRIDGE] command grammar and monitor dispatch.
- Machine definitions select available/default audit providers with audit_targets and audit_default_target.
- NES-NTSC declares cartridge as its audit provider and continues to select ines-audit.config.phlegm for byte interpretation.
- Memory / Program -> Audit is a direct complete GUI leaf and executes AUDIT, not CARTRIDGE AUDIT.
- GUI execution receives the actual audit report in graphical history instead of only the generic VM status summary.
- AUDIT reports resident PRG/CHR CRC32 + SHA-1. When the original source is still accessible it also recomputes whole-image CRC32 + SHA-1, profile-derived structural flags, described/trailing size, and optional exact reference-catalog status.
- ZIP-member cartridge sources are re-extracted through the shared media-container layer only for the duration of the audit and the temporary member is deleted afterward.
- Unknown hashes remain unverified; audit.lib never guesses that an image is clean, hacked, bad, overdumped, or a specific revision. Classification remains reference-data driven.
- CARTRIDGE AUDIT remains accepted only as a compatibility alias.
- Embedded command/console/GUI definition version bumped to 12 so installed definitions refresh.
- Modified source/config/docs use Windows CRLF line endings only.
