feat: audit incomplete multipart archive sets

[seonghobae]

Summary

• add a bounded read-only Rust scanner for .zip.partNNN archive sets
• classify missing parts, duplicate indices, and contiguous-but-terminal-unverified sets
• emit stable path-redacted fingerprints while optionally preserving exact evidence in a create-new mode-0600 private dossier
• keep every discard decision approval-bound; this command contains no mutation path

Safety

• no symlink traversal
• bounded by entry count and depth
• incomplete traversal can never authorize automatic discard
• missing parts do not rule out partial-content recovery
• contiguous parts do not prove the terminal member was observed

Verification

• cargo test --features cloud-cli --lib multipart_archive (9 passed)
• cargo test --features cloud-cli --bin disksage-multipart-archive-audit (3 passed)
• cargo check --features cloud-cli --all-targets
• focused rustfmt --check and git diff --check
• live read-only Downloads audit reproduced the same fingerprint twice: 2 incomplete sets, 6 parts, 1,425,722,689 bytes, evidence complete, mutation false

Stack

Draft and stacked on #87 (feat/semantic-catalog-export).

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 1ee8e825-d612-465c-b585-e56ced579ec3

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}