kpi-report.py canonical eventType set is stale vs wi-http SSOT (titleChanged/audit-finding/packet false-flagged OFF-VOCAB). Fix: fetch canonical list from wi-http (or /utcp) instead of hardcoding, so it never drifts