Audit command handling

Parses scanner options, selects report output, and applies the command's exit-status contract.

The internal runner returns success when it produces a report, including one with findings. Invalid input or an operational failure that prevents a report returns status 2.