audit: rule-14 sweep over the blocked queue, and #2208's cost estimate falsified

The todo queue was empty, so the sweep re-checked every blocked ticket against
today's tree rather than against its recorded gate.

#2208 moves blocked -> needs_user, because its premise is measurably wrong. It
says confining IsolatedStorageFileStream's public constructor would break 'every
consumer that constructs one directly'. Measured across both consumers and all
first-party code: cna has ZERO occurrences of any kind, mobile-eggbert has ONE
and it is an #include, and the only first-party construction outside the class is
inside IsolatedStorageFile::OpenFile itself -- the confined path, which already
holds the store it would pass. The migration is EMPTY. The defect is confirmed
still present, and it is a wider hole than #2207's TOCTOU: no check at all,
reachable with no race and no privilege.

Eight further tickets re-checked and recorded as staying blocked, each with the
dependency that actually remains: #1888 and #1889 (declined layout changes,
verified still undrifted), #1940 (the root of the date/time chain -- #1942, #1943
and #1945 all wait on it), #1942 and #1944, #1958 (SR-AUD-209 alone), #1980 (G-3
alone) and #1997 (A-2 and A-4, A-2's cost measured by the module-boundary
validator rejecting a first cut).

No code changed; no gate needed.

Author: robertvokac