fls-spec-lock-remediation

Audit FLS drift for an issue, write an evidence report, and open a spec-lock-only PR when guideline updates are not required.