SCRIP-SITE-010: integrate the reader product into one installable delivery #273

Owner request, 2026-10-10: review every open PR and prepare one major product update in a new PR against master. The published repository has not received the accumulated local work.

Bounded delivery

Integrate #268 (offline frozen report), #270 (private local analyzer) and #272 (five-route reader site) without duplicate implementations. Add a standard installable CLI, CSV export, readable metric labels/summary, exact numeric presentation, bounded input and private error handling from the tested local handoffs. Preserve the existing Python public API, historical artifacts, complete repository tests and deployment interlocks.

Acceptance

• One new PR targets master; old PRs/branches remain until the integrated result is accepted.
• Actual local UTF-8 input -> 29 unchanged metrics -> JSON/HTML/CSV, with no manuscript payload or private paths in errors.
• FIFO, symlink, oversized-input and output-collision regressions; dictionary limits and null semantics remain explicit.
• Installed CLI exposes real analyze/diagnostic/site commands, with documented build and install steps.
• The canonical site retains all existing routes and the digest-approved full-work diagnostic. Full repository tests and a deterministic site rebuild run on the new head; package smoke tests run on the installed artifact.
• No M1/M2/M3/M4/M5 completion claim, no external registry publication, no Pages activation/admin change.

Review receipts have been posted on all three current PRs. #270 has reproduced input-blocking and path-disclosure findings; carry the fix in the integration. This issue/PR is the sole integration claim; do not open competing local-workbench integration branches.