Function build 

pub fn build(findings: &[Finding], root: &Path) -> Baseline

Build a baseline from a scan result.

Identical findings are not deduplicated: N occurrences produce N entries so that filtering can use counting semantics. Entries are sorted by (file, rule_id, hash) to keep the file stable between runs.