docs(walkthroughs): document the area tours and why findings close and reopen

[blakeaowens]

Description

Documents the first wave of in-app tours, in two pages.

In-App Walkthroughs (docs/content/navigation/PRO__walkthroughs.md): a new "Tours by area" section. The page described only the App Tour; the section lists the eleven area tours in one table, with where the lightbulb lists each one, what it covers, and who sees it (the feature and permission each is gated on, and the steps a missing permission skips). The tours are Why Findings Close and Reopen; Organizations, Assets, Engagements and Tests; Finding Statuses, SLAs and Risk Acceptance; The Findings List; Exporting Findings; API Access; Reports; SSO and Login; Classic Jira or the Jira Connector; Locations; and Upstream Connectors.

Reimport (docs/content/import_data/import_intro/reimport.md): a new "Why Findings Close and Reopen" section, for the most common reimport question, a Finding that keeps closing and coming back. It says where the evidence is:

• the Import History on the Test page counts the Findings each Reimport closed and reactivated;
• the note a Reimport writes on a Finding it closes or reopens names the scan type, and a Finding closed by hand has neither note.

It then covers the three causes behind most cases:

• a partial scan reimported into a Test that holds a full one, with Close Old Findings on;
• a Finding closed by hand while the scanner still reports it, which the next Reimport reopens (False Positive, Out of Scope and Risk Accepted are the statuses Reimport never reopens);
• a Finding whose location moved, when the line number or file path is part of how Reimport matches that tool's Findings.

It ends with Do Not Reactivate for a scanner that is triaged elsewhere. The section links only to anchors already on the same page (Actions, Reimport Deduplication, Reopen Findings), and the reimport tour's last card links to its anchor, #why-findings-close-and-reopen.

Every other tour card links to a docs section that already exists; each of those anchors was checked on docs.defectdojo.com.

English only: the language copies of the docs are translated automatically.

Testing

Docs only. Each reimport claim was checked against the reimport code on dev (Close Old Findings on by default for Reimport, the two note texts, the statuses Reimport never reopens, Do Not Reactivate). Each row of the tours table was checked against the tour's definition: its pages, its feature flag and permission, and its per-step gates. The Hugo site was not built locally.

🤖 Generated with Claude Code