fix: Athena-audit remediation batch — atomic .bak install (hardlink no-clobber + truncated-prefix repair), qualifier-scope pinned primary-only (docs regen), one-pass post-application nudge grace (3 legs), Pi nudge-state ordinal hygiene, rust queued-U re-keyed to whole tags (differential parity golden)

Co-Authored-By: Alfonso <alfonso@cortexkit.io>