audits: panic-attack reads classifications from audits/ but echidna stores at reports/audits/ (suppressions don't fire)

[hyperpolymath]

Observation (surfaced as a meander during #177)

`panic-attack` registry loader (`load_user_classifications` in `panic-attack/src/assail/mod.rs:220`) reads from `/audits/assail-classifications.a2ml` only.

Echidna keeps its registry at `reports/audits/assail-classifications.a2ml`.

Effect: neither the pre-existing nor the §9-11 classifications added in #186 currently suppress panic-attack findings. The only suppressions firing today are kanren structural ones with `suppressed: true`.

Fix shape

Two options:

1. Symlink `audits → reports/audits` (cheap, preserves current layout)
2. Move `reports/audits/assail-classifications.a2ml` to `audits/` and update any cross-refs

Option 1 is least disruptive.

Why this matters

The 22 classification entries in `reports/audits/assail-classifications.a2ml` (16 pre-existing + 6 from #186) are inert until this is fixed. Once the symlink lands, the 6 High-FFI findings will actually clear in the next sweep.

Refs

• `reports/audits/assail-classifications.a2ml` (the registry that should be canonical)
• `audits/audit-ffi-boundary.md` (the human doc; correct location)
• docs(audits): FFI boundary §§9-11 (FLINT + Zig bridges + Zig overlay) — closes #177 #186 (the PR that added §§9-11 + 6 classifications, all currently inert)
• panic-attack repo `src/assail/mod.rs:220` (the loader)