feat(audit): automate gateway phase0 live-window capture

docs/plans/artifacts/phase0_baseline_live_2026-02-27.json

@@ -1,5 +1,5 @@
 {
-  "generated_at": "2026-02-27T07:49:58.821Z",
+  "generated_at": "2026-02-27T07:55:30.862Z",
   "source_audit_path": "~/.local/share/flynn/audit.log",
   "source_event_count": 94,
   "sampled_event_count": 88,

docs/plans/artifacts/phase0_baseline_live_gateway_2026-02-27.json

@@ -1,18 +1,28 @@
 {
-  "generated_at": "2026-02-27T07:47:41.346Z",
+  "generated_at": "2026-02-27T07:55:31.178Z",
   "source_audit_path": "~/.local/share/flynn/audit.log",
   "source_event_count": 6,
   "sampled_event_count": 6,
   "filters": {
-    "since_ms": 1772178440693,
-    "until_ms": 1772178442694,
+    "since_ms": 1772178441443,
+    "until_ms": 1772178441944,
     "sources": [
       "gateway"
     ],
     "exclude_session_substrings": [
       "probe"
     ],
-    "anonymized_identifiers": true
+    "anonymized_identifiers": true,
+    "auto_gateway_cancel_window": {
+      "session_id": "ws:phase0-gateway-window",
+      "start_time_ms": 1772178441443,
+      "end_time_ms": 1772178441944,
+      "event_count": 6,
+      "run_cancel_count": 1,
+      "cancel_requested_count": 1,
+      "cancelled_count": 1,
+      "padding_ms": 250
+    }
   },
   "options": {
     "sources": [