feat(humanizer): wire humanizer into 6 remaining CLIs with --raw

Adds --raw flag to all 6 remaining CLIs and wires humanization into the
default rendering path. --json and --raw both bypass humanization for
v5.0.0 byte-equal output; default mode humanizes findings/diff/prose.

  token-hotspots-cli: humanizes payload.findings before stdout JSON write.
  plugin-health-scanner: humanizes finding titles in stderr brief summary;
    --json/--raw write byte-identical v5.0.0-shape result to stdout.
  drift-cli: humanizes diff.{newFindings,resolvedFindings,unchangedFindings,
    movedFindings} before formatDiffReport; --raw applies to save and list
    modes too. Baselines remain raw v5.0.0 on disk.
  fix-cli: humanizes manual-finding titles in stderr fix-plan prose; both
    --json and --raw produce identical machine-readable JSON to stdout.
  manifest, whats-active: --raw is a no-op (no findings, inventory only)
    but parsed for CLI surface consistency.

Decision on missing --output-file flag for drift-cli/fix-cli/plugin-health:
deferred. SC-6/SC-7 tests in Wave 4 will use stdout-redirect (the simpler
Alt B path) since these CLIs already write JSON to stdout in machine modes.

Test cli-humanizer.test.mjs covers all 6 CLIs. Three CLIs that read
environment state (plugin-health, manifest, whats-active) verify
mode-equivalence (--json == --raw) instead of frozen-snapshot byte-equal,
because their output reflects current marketplace state which drifts as
plugins are added since the Wave 0 capture.

Wave 3 / Step 7 of v5.1.0 humanizer.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

plugins/config-audit/scanners/drift-cli.mjs

@@ -14,6 +14,7 @@ import { resolve } from 'node:path';
 import { runAllScanners } from './scan-orchestrator.mjs';
 import { diffEnvelopes, formatDiffReport } from './lib/diff-engine.mjs';
 import { saveBaseline, loadBaseline, listBaselines } from './lib/baseline.mjs';
+import { humanizeFindings } from './lib/humanizer.mjs';
 
 async function main() {
   const args = process.argv.slice(2);
@@ -22,6 +23,7 @@ async function main() {
   let save = false;
   let list = false;
   let jsonMode = false;
+  let rawMode = false;
   let includeGlobal = false;
 
   for (let i = 0; i < args.length; i++) {
@@ -35,6 +37,8 @@ async function main() {
       list = true;
     } else if (args[i] === '--json') {
       jsonMode = true;
+    } else if (args[i] === '--raw') {
+      rawMode = true;
     } else if (args[i] === '--global') {
       includeGlobal = true;
     } else if (!args[i].startsWith('-')) {
@@ -45,7 +49,7 @@ async function main() {
   // --- List mode ---
   if (list) {
     const result = await listBaselines();
-    if (jsonMode) {
+    if (jsonMode || rawMode) {
       process.stdout.write(JSON.stringify(result, null, 2) + '\n');
     } else {
       if (result.baselines.length === 0) {
@@ -66,7 +70,7 @@ async function main() {
 
   // --- Save mode ---
   if (save) {
-    if (!jsonMode) {
+    if (!jsonMode && !rawMode) {
       process.stderr.write(`Config-Audit Drift CLI v2.1.0\n`);
       process.stderr.write(`Saving baseline "${baselineName}" for ${resolve(targetPath)}\n\n`);
     }
@@ -74,7 +78,7 @@ async function main() {
     const envelope = await runAllScanners(targetPath, { includeGlobal });
     const result = await saveBaseline(envelope, baselineName);
 
-    if (jsonMode) {
+    if (jsonMode || rawMode) {
       process.stdout.write(JSON.stringify({ saved: true, name: result.name, path: result.path }, null, 2) + '\n');
     } else {
       process.stderr.write(`\nBaseline "${result.name}" saved to ${result.path}\n`);
@@ -84,7 +88,7 @@ async function main() {
   }
 
   // --- Drift mode (default) ---
-  if (!jsonMode) {
+  if (!jsonMode && !rawMode) {
     process.stderr.write(`Config-Audit Drift CLI v2.1.0\n`);
     process.stderr.write(`Target: ${resolve(targetPath)}\n`);
     process.stderr.write(`Baseline: ${baselineName}\n\n`);
@@ -93,7 +97,7 @@ async function main() {
   // Load baseline
   const baseline = await loadBaseline(baselineName);
   if (!baseline) {
-    if (jsonMode) {
+    if (jsonMode || rawMode) {
       process.stdout.write(JSON.stringify({ error: `Baseline "${baselineName}" not found. Save one with --save.` }, null, 2) + '\n');
     } else {
       process.stderr.write(`Baseline "${baselineName}" not found.\n`);
@@ -108,10 +112,19 @@ async function main() {
   // Diff
   const diff = diffEnvelopes(baseline, current);
 
-  if (jsonMode) {
+  if (jsonMode || rawMode) {
+    // --json and --raw both write the raw v5.0.0-shape diff (byte-identical).
     process.stdout.write(JSON.stringify(diff, null, 2) + '\n');
   } else {
-    const report = formatDiffReport(diff);
+    // Default mode: humanize finding-bearing diff fields before report rendering.
+    const humanizedDiff = {
+      ...diff,
+      newFindings: humanizeFindings(diff.newFindings || []),
+      resolvedFindings: humanizeFindings(diff.resolvedFindings || []),
+      unchangedFindings: humanizeFindings(diff.unchangedFindings || []),
+      movedFindings: humanizeFindings(diff.movedFindings || []),
+    };
+    const report = formatDiffReport(humanizedDiff);
     process.stderr.write('\n' + report + '\n');
   }