chore: wire cross_repo config for X1/X2/X3 detectors

Adds audit.cross_repo.platform_manifest_repo: ../PlatformManifest so
the X1 (legacy name), X2 (undeclared import), and X3 (stale GitHub URL)
detectors are active. Live run shows 0 findings.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: ProtocolWarden

.console/log.md

@@ -3,6 +3,8 @@
 _Chronological continuity log. Decisions, stop points, what changed and why._
 _Not a task tracker — that's backlog.md. Keep entries concise and dated._
 
+- Wire cross_repo config (2026-05-08, on chore/wire-cross-repo-config): Added `audit.cross_repo.platform_manifest_repo: ../PlatformManifest` to `.custodian/config.yaml`. Enables X1/X2/X3 detectors; live run shows 0 findings.
+
 - codex --full-auto → -a never (2026-05-08, on fix/codex-full-auto): codex dropped --full-auto. Updated bootstrap.py default approval_mode to `-a never`; same fix applied to kodo sessions/codex.py, orchestrators/codex_cli.py, and benchmark/runner.py in that repo.
 
 - Banner padding equalized and trimmed (2026-05-08, on fix/banner-equal-padding): Equalized lp and g to the same value, then trimmed 15% — both now `max(4, (w-1)*17//80)` (= (w-1)//4 × 0.85). At 120 cols: 25 spaces each side.

.custodian/config.yaml

@@ -7,6 +7,9 @@ tests_root: tests
 # `_custodian/` overlay layer (see OperationsCenter for a worked example).
 
 audit:
+  cross_repo:
+    platform_manifest_repo: ../PlatformManifest
+
   # C2: OperatorConsole is a CLI/TUI tool — print() is its user-facing output API,
   # not a debug leftover. Exempting the whole package is the honest config.
   # C1: bootstrap.py has a single deferred TODO (pending SwitchBoard validation).