v1.6.28 — Scheduled report-only jobs, compliance audit log, and documentation update

- Scheduled jobs can now run in report-only mode (skip scan, email latest DB results)
- Compliance audit log records all significant admin actions in an immutable DB table
- VERSION bumped to 1.6.28; CHANGELOG [Unreleased] sealed as [1.6.28] — 2026-05-28
- Both manuals updated: CPR-only mode, OCR language, file redaction, related documents,
  date-range token scoping, report-only jobs, audit log tab, two new FAQ entries
- TODO.md updated with all completed tasks

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

templates/index.html

@@ -757,12 +757,19 @@ document.addEventListener('DOMContentLoaded', applyI18n);
                 <input id="schedMinute" type="number" min="0" max="59" value="0" style="width:50px">
               </div>
             </div>
-            <div class="settings-row">
+            <div class="settings-row" id="schedProfileRow">
               <label data-i18n="m365_sched_profile">Profile</label>
               <select id="schedProfile" style="flex:1;height:26px;padding:0 8px;border:1px solid var(--border);border-radius:5px;background:var(--surface);color:var(--text);font-size:12px;box-sizing:border-box">
                 <option value="" data-i18n="m365_sched_profile_last">Last saved settings</option>
               </select>
             </div>
+            <div class="settings-row">
+              <label data-i18n="m365_sched_report_only">Report only</label>
+              <label class="toggle" style="flex:unset"><input type="checkbox" id="schedReportOnly" onchange="schedToggleReportOnly()"><span class="toggle-slider"></span></label>
+            </div>
+            <div class="settings-row" id="schedReportOnlyHint" style="display:none">
+              <span style="font-size:10px;color:var(--muted);line-height:1.4" data-i18n="m365_sched_report_only_hint">Email the latest scan results without running a new scan. Requires scan results in the database.</span>
+            </div>
             <div class="settings-row">
               <label data-i18n="m365_sched_auto_email">Email report automatically</label>
               <label class="toggle" style="flex:unset"><input type="checkbox" id="schedAutoEmail"><span class="toggle-slider"></span></label>