pub fn calculate_score(findings: &[AuditFinding]) -> u32
score = 100 − Σ deductions, saturating at 0.
score = 100 − Σ deductions