chore(hypatia): acknowledge current findings in the baseline (#141)

The `Validate Hypatia Baseline` gate fails on any finding not
acknowledged in `.hypatia-baseline.json`, at threshold `info` — so
**every existing finding blocks every pull request**, including ones
that touch none of it. This is the single largest true blocker in the
estate backlog (14 PRs).

**Ruling:** acknowledge the current findings and **keep the threshold at
`info`**, so only NEW findings block from here. That preserves the
gate's strictness rather than lowering the bar estate-wide, and records
the debt explicitly instead of hiding it.

Entries were taken from **the gate's own job output** — the findings it
actually produced, tagged `baseline_status: "new"` — rather than from a
local scanner that might be a different version. Only those entries are
added; findings already matched by the existing baseline are untouched,
so their `severity_override` values are not lost.

Four keys only (`severity`, `rule_module`, `type`, `file`): the baseline
schema is a **closed key set** validated in jq by `apply-baseline.sh`,
and any extra key makes the whole file invalid. `tracking_issue` is
omitted rather than invented — it is validated against an `owner/repo#N`
shape.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Signed-off-by: Jonathan D.A. Jewell <6759885+hyperpolymath@users.noreply.github.com>
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>

Author: hyperpolymath

.hypatia-baseline.json

@@ -190,5 +190,47 @@
     "rule_module": "workflow_audit",
     "type": "unsafe_curl_payload",
     "file": "hypatia-scan.yml"
+  },
+  {
+    "severity": "medium",
+    "rule_module": "structural_drift",
+    "type": "SD007",
+    "file": "0-AI-MANIFEST.a2ml"
+  },
+  {
+    "severity": "medium",
+    "rule_module": "structural_drift",
+    "type": "SD009",
+    "file": "ffi/zig/src/main.zig"
+  },
+  {
+    "severity": "medium",
+    "rule_module": "structural_drift",
+    "type": "SD009",
+    "file": "src/EvidenceGraph/ABI/Foreign.idr"
+  },
+  {
+    "severity": "medium",
+    "rule_module": "structural_drift",
+    "type": "SD009",
+    "file": "src/EvidenceGraph/ABI/Layout.idr"
+  },
+  {
+    "severity": "medium",
+    "rule_module": "structural_drift",
+    "type": "SD009",
+    "file": "src/EvidenceGraph/ABI/Types.idr"
+  },
+  {
+    "severity": "medium",
+    "rule_module": "structural_drift",
+    "type": "SD009",
+    "file": "src/abi/Types.idr"
+  },
+  {
+    "severity": "medium",
+    "rule_module": "workflow_audit",
+    "type": "missing_timeout_minutes",
+    "file": "push-email-notify.yml"
   }
 ]