fix: round 2 audit fixes, updated emulator profiles

Scripts:
- fix generate_site nav regex destroying mkdocs.yml content
- fix auto_fetch comma-separated MD5 in find_missing
- fix verify print_platform_result conflating untested/missing
- fix validate_pr path traversal and symlink check
- fix batocera_scraper brace counting and escaped quotes in strings
- fix emudeck_scraper hash search crossing function boundaries
- fix pipeline.py cwd to repo root via Path(__file__)
- normalize SHA1 comparison to lowercase in generate_pack

Emulator profiles:
- emux_gb/nes/sms: reclassify from alias to standalone profiles
- ep128emu: remove .info-only files not referenced in source
- fbalpha2012 variants: full source-verified profiles
- fbneo_cps12: add new profile

scripts/auto_fetch.py

@@ -81,8 +81,10 @@ def find_missing(config: dict, db: dict) -> list[dict]:
             found = False
             if sha1 and sha1 in db.get("files", {}):
                 found = True
-            elif md5 and md5 in db.get("indexes", {}).get("by_md5", {}):
-                found = True
+            elif md5:
+                by_md5 = db.get("indexes", {}).get("by_md5", {})
+                md5_list = [m.strip() for m in md5.split(",") if m.strip()]
+                found = any(m in by_md5 for m in md5_list)
 
             if not found:
                 missing.append({