fix: repair CodeGuard v1.8.0 regressions

[alxxjohn]

Summary

• resolve Go imports through owning modules, nested modules, and go.work use/replace metadata
• make baseline matching deterministic and one-to-one while separating exact duplicates from context/content collisions
• keep audit rule counts aligned with confidence and language distributions
• report linker- or Go-module-injected versions before the development fallback
• exempt regexp.MustCompile globals unless reassignment is demonstrated
• allow grammatical imperative boolean parameter names in Go and C++

Testing

• added regression tests first for workspace imports, collision matching/accounting, version precedence/build injection, mutable globals, and boolean naming
• go test ./... -count=1
• go vet ./...
• gofmt check
• go build -trimpath -o /private/tmp/codeguard-v180-repairs ./cmd/codeguard

Notes

• public baseline/report schemas, CLI flags, and rule IDs remain unchanged
• golangci-lint was not available in the local environment; CI remains authoritative for that gate