- added optional CSV export for findings.csv and warnings.csv
- preserved default Markdown/JSON behavior when --csv is not requested
- added single-host and multi-host CSV regression coverage
- added .gitattributes guardrails to reduce future line-ending drift