test(audit): add end-to-end audit integration coverage

[Copilot]

Summary

Audit analyzers could silently miss evidence when PipelineArtifact archives repeated the artifact name as their top-level directory.

• Artifact handling
  • Normalize flat and repeated-root archives identically.
  • Isolate filtered artifact storage and analysis from full-run caches.
  • Preserve unrelated evidence when optional aw_info metadata is malformed.
• Integration coverage
  • Exercise console/JSON audit, trace, and MCP-author entry points against deterministic fake ADO archives.
  • Cover filtering, cache refresh, malformed inputs, redaction, timeline correlation, and analyzer output.
• Live contract
  • Audit a completed candidate smoke child and require agent, detection, and safe-output artifact families.

Test plan

• cargo test --test audit_it
• cargo test --bin ado-aw audit::
• cargo clippy --all-targets --all-features -- -D warnings

• Fixes test(audit): add end-to-end integration suites for audit and debug commands #1819

[azure-pipelines]

Azure Pipelines:
2 pipeline(s) were filtered out due to trigger conditions.
There may be pipelines that require an authorized user to comment /azp run to run.