Rules engine for code-moniker. Owns the rule DSL, rule configuration and
profiles, evaluation over the symbol graph, suppression, and the file/project
scan pipeline. Produces structured [FileReport]/[FileError] values; it
does not render output or own process exit codes — that is the CLI's job.