Read path is cgo like search. Control questions live in rank so CI can test them without ladybug. Python bin/kb/{get,stats,eval} stays the runner fallback.
