feat: close campaign findings by code review

campaign.py review applies or rejects an open finding with the reason read in the code. Applied fields go through the profile editor with the finding's records as evidence. The rule table reads on_mismatch: warn and counts a signature as a content check.

scripts/campaign_profiles.py

@@ -24,6 +24,8 @@ ANCHORS = {
     "path": ("name",),
     "aliases": ("path", "name"),
     "validation": ("sha1", "md5", "crc32", "size", "name"),
+    "on_mismatch": ("validation", "sha1", "md5", "crc32", "size", "name"),
+    "found_by": ("path", "name"),
 }