docs(wiki): cover the new rule families, SMT refinement and SARIF CWE tagging
Since February the analyzer gained ten rule families, an SMT layer and a
reworked SARIF emission; the wiki documented none of them.
- Diagnostic Rule Catalog rewritten from DiagnosticEmitter.cpp: every ruleId
with its severity and its CWE, grouped by family, including the rules that
deliberately carry no CWE
- Analysis Categories: recursion, integer handling, out-of-bounds reads, null
dereference, type confusion, TOCTOU, command injection, global
read-before-write and uninitialized-bytes exposure
- the AnalysisIncomplete rules documented as what they are: the analysis
reporting it could not conclude, Info and no CWE, so a clean report that
contains them means nothing was proven rather than nothing is wrong
- same for unresolved calls making max stack unknown, and
--assume-external-frame as the way to charge a budget instead
- SARIF: one rules entry per rule, CWE tags collected across the run,
security-severity as the highest CWE of the rule, per-diagnostic file paths,
1-based clamping
- CLI: SMT options and modes, --config/--print-effective-config, --sarif-out,
--buffer-model, --demangle, IR compile cache, --jobs=auto
- pipeline: SMT refinement stage, MemorySSA-backed reaching definitions, shared
traversals and artifacts, flow-sensitive resource ownership engine
- build: ENABLE_Z3_BACKEND and the other current CMake options
docs(wiki): sync external wiki with updated architecture, CLI, and diagnostic rule documentation