feat(query): (crosslang ...) + (since ...) forms (issue #33 S3b+c)

[hyperpolymath]

Summary

Adds two query forms to `panic-attack query`, closing the S3 follow-ups called out in #57:

1. `(since 2026-04-12)` — matches findings whose `first_seen_run` (when ISO-formatted) or hexad `created_at` is ≥ the cutoff. RFC-3339 strings sort lexicographically, so the string `>=` compare is exact for any well-formed timestamp. Combined with `and`, this expresses the `(diff :since DATE :category CAT)` use case the issue calls out:
   ```scheme
   (and (since 2026-04-12) (category CryptoMisuse))
   ```

2. `(crosslang :from FROM_CAT :to TO_CAT)` — co-occurrence proxy for FFI/cross-language reachability. Matches a `TO`-category finding in a repo that also has at least one `FROM`-category finding. Most FFI-driven proof drift surfaces in the same repo, so this is the operationally useful approximation until `kanren::crosslang` facts are persisted as hexads.
   Both shapes parse:
   ```scheme
   (crosslang :from UnsafeFFI :to ProofDrift)
   (crosslang UnsafeFFI ProofDrift)
   ```

Stacked on #57 — diff against `main` includes the S1+S2+S3 changes until they land.

Test plan

• `cargo test --lib` — 248 green (9 new).
• `cargo clippy --all-targets -- -D warnings` — clean.

Refs #33. Stacked on #57.

🤖 Generated with Claude Code

[github-actions]

🔍 Hypatia Security Scan

Findings: 74 issues detected

Severity	Count
🔴 Critical	7
🟠 High	16
🟡 Medium	51

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Issue in boj-build.yml",
    "type": "unknown",
    "file": "boj-build.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in cargo-audit.yml",
    "type": "unknown",
    "file": "cargo-audit.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "unknown",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "unknown",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in codeql.yml",
    "type": "unknown",
    "file": "codeql.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in coverage.yml",
    "type": "unknown",
    "file": "coverage.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dependency-review.yml",
    "type": "unknown",
    "file": "dependency-review.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "unknown",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "unknown",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in dogfood-gate.yml",
    "type": "unknown",
    "file": "dogfood-gate.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence