Package evidence

Search a scanned package.

Static findings, release-diff evidence, publisher posture, and related candidate clusters for saved scans.