Sub-ticket of MARS-341 Scanner-probe 404 classifier — adopt PLUTO-453 canonical infra/cloud/backup/profiler probe family (docker/azure/gcloud cred dotdirs, cloud-cred JSON, .ya?ml, .tf(state|vars), .sql(.gz), profiler/heapdump/threaddump/configprops, archives .zip/.tgz/.tar.gz, whole-path dump|trace|logfile). 07:32 UTC sweep paged 87x Dockerfile/k8s/docker-compose + 87x backup.tar.gz — NOT envfile so canonical C misses them, warn-page. Demote-only to silent security/info forceSync-retain. MUST re-prove anchor discipline on Mars manifest: cred dotdirs stay (^|/) any-segment; bare-ext yaml/sql/tf/zip/tar.gz safe ONLY if public/+handlers serve zero such files (confirm); .json STAYS filename-anchored (442 ban). Cross-fleet: PLUTO-453 live canonical, VENUS folds in. Reversible. · mars