feat(review): rule-scoped inline suppression via cora-ignore (#554)

[ajianaz]

What

Adds cora-ignore: <rule>[, <rule>...] inline markers. A marker in any comment style suppresses findings with that exact title (case-insensitive) on the same line, or the next line when the marker line is comment-only. One shared filter (engine::inline_suppress) runs on merged deterministic + LLM findings, right after ignore.rules. A bare cora-ignore suppresses nothing. Documented in docs/configuration.md; CHANGELOG entry added.

Why

ignore.rules hides a title project-wide and ignore.files hides whole files; there was no way to accept one false positive (e.g. bytesPerToken) without hiding the rest. Closes #554.

Testing

• 12 unit tests: same line, next line, multiple rules, unrelated rule/other file/other line kept, bare marker ignored, comment styles, case-insensitivity, exact-title match, plus a test running real secrets/security scanner output through the filter.
• cargo fmt, cargo clippy --all-targets -- -D warnings, cargo test all green.

🤖 Generated with Claude Code