Function build_report 

pub fn build_report(
    scan: ScanData,
    ignores: &[Ignore],
    min_severity: Option<Severity>,
    provenance: Provenance,
) -> FleetReport

assemble for non-VEX callers: each ignore is a fleet-wide suppression and the captured occurrences are discarded.