makes the windows reports less empty:

• shared report writer with severity counts and top findings
• evidence files, limitations, and next steps in report.md
• keeps existing raw output and summaries

checked parser/static/wrapper checks in pwsh docker plus local syntax/readability checks.