fix: suppress GCC false-positive -Wmaybe-uninitialized, fix TRE alignment

- Add -Wno-maybe-uninitialized to GCC-only flags (known false positive
  with ASan at -O1 on malloc return values)
- Initialize node_ids to NULL before malloc for extra safety
- Add -fno-sanitize=alignment for vendored TRE regex library (upstream
  has misaligned struct access on Windows)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: maplenk

Makefile.cbm

@@ -42,7 +42,8 @@ IS_GCC := $(shell echo | $(CC) -dM -E - 2>/dev/null | grep -q '__GNUC__' && ! ec
 GCC_ONLY_FLAGS :=
 ifeq ($(IS_GCC),yes)
 GCC_ONLY_FLAGS := -Wno-format-truncation -Wno-unused-result \
-                  -Wno-stringop-truncation -Wno-alloc-size-larger-than
+                  -Wno-stringop-truncation -Wno-alloc-size-larger-than \
+                  -Wno-maybe-uninitialized
 endif
 
 CFLAGS_COMMON = -std=c11 -D_DEFAULT_SOURCE -D_GNU_SOURCE -Wall -Wextra -Werror \
@@ -222,7 +223,7 @@ SQLITE3_CFLAGS_TEST = -std=c11 -g -O1 -w -DSQLITE_DQS=0 -DSQLITE_THREADSAFE=1
 
 # TRE regex (vendored, Windows only — POSIX uses system <regex.h>)
 TRE_SRC = vendored/tre/tre_all.c
-TRE_CFLAGS = -std=c11 -g -O1 -w -Ivendored/tre
+TRE_CFLAGS = -std=c11 -g -O1 -w -Ivendored/tre -fno-sanitize=alignment
 
 # yyjson (vendored)
 YYJSON_SRC = vendored/yyjson/yyjson.c

src/store/store.c

@@ -5903,7 +5903,8 @@ static int summary_build_clusters(const arch_summary_file_row_t *rows, int row_c
         return CBM_STORE_OK;
     }
 
-    int64_t *node_ids = malloc((size_t)row_count * sizeof(int64_t));
+    int64_t *node_ids = NULL;
+    node_ids = malloc((size_t)row_count * sizeof(int64_t));
     if (!node_ids) {
         return CBM_STORE_ERR;
     }