Audit: compare current state against last saved report (diff mode)

[davidwhittington]

Add --diff flag to security-audit.sh that loads the previous report from private/workstations/ and highlights what changed since the last audit. Useful for tracking drift.