The /audit page speaks the home page's language #9710

Next in the design pass after #9433; #9645-#9649, #9688-#9690, #9693 and #9694 cover other pages. The audit says who can do what across every app; it still boxes its findings in cards (audit.ts ~207, ~440, ~487, ~527, ~599).

Done looks like:

• [x] The page follows the opening principles of docs/DESIGN.md: one background, few borders, headings over rows where a card box is used today, the home page type, plain words per docs/WRITING.md.
• [x] Any new component class is named in docs/design/areas/<area>.md, never docs/DESIGN.md.
• [x] A test renders the page and asserts the rows-not-boxes shape for its per-app standing list, and fails on the current markup.
• [x] bun scripts/design-lint.ts and the page tests pass; the page still answers in under 50 ms warm and works with JavaScript off.

Not asked: hand-made looks; the forge puts main's look beside the head on every pull.

Files: src/web/pages/audit.ts. Risk: the audit reads from git; keep the read path untouched and change markup only. Brief: a web builder.

Reviewed pull #9729 at its head: ticked The page follows the opening principles of docs/DESIGN.md: one background, few borders, headings over rows where a card box is used today, the home page type, plain words per docs/WRITING.md.; Any new component class is named in docs/design/areas/<area>.md, never docs/DESIGN.md.; A test renders the page and asserts the rows-not-boxes shape for its per-app standing list, and fails on the current markup.; bun scripts/design-lint.ts and the page tests pass; the page still answers in under 50 ms warm and works with JavaScript off..