Strengthen export-based pilot workflow

[hlinor-systems]

What changed

• strengthened deterministic scope analysis with included/excluded/ambiguous matching, basic negation handling, stable finding IDs and multiple rule matches;
• hardened Slack, Gmail/EML and WhatsApp export normalization, source classification and file validation;
• added source management, a real local-project flow, explicit demo mode, stale-result handling and honest pilot metrics in the frontend;
• added device-local workspace versioning, report updates, accessibility improvements and pilot documentation;
• expanded tests and browser QA coverage.

Why

The pilot needed a trustworthy export-based workflow for finance, sales and delivery users. Previously, scope clauses mostly appeared as labels after a keyword match, demo UI controls were misleading, and source changes could leave stale findings visible.

Validation

• npm test — 14 tests passed
• npm run typecheck — passed
• npm run build — passed
• browser smoke test — new local project, SOW + Slack upload, analysis and finding render passed
• desktop/mobile render and onboarding keyboard checks passed