merge: resolve conflicts with main in investigation backstop

Combine both the branch's session-log-based validation (dataclasses,
allowlist patterns, session file parsing) and main's shared-allowlist
diff-based validation into a unified script with --mode flag.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: rjmurillo-bot