Cap index reads, games, archive fingerprints, selected-root entries, recursive depth and bytes, scan time, and version.ini reads. Failed rescans retain the prior complete index and revision instead of publishing partial state. Test Plan: - just test - just clippy - focused oversize index, traversal, and prior-snapshot tests - git diff --check