Sub-ticket of PLUTO-182 404 classifier mis-routes bot-probe paths (.env harvest) as [warn] operator DMs - should be security-log-only per Elazar 2026-06-20 rule · pluto