docs(plans): clarify query/audit asymmetry + Q5 target-state qualifier

CodeRabbit's deeper fact-check (via GitHub API after sandbox clone failed
twice) confirmed all earlier claims accurate, but flagged two clarity
gaps in the new-CLI-surfaces framing:

- L.6 didn't surface that `--ci` is asymmetric across verbs: on `query`
  it's a new alias for already-shipped `--format sarif` (PR #43); on
  `audit`, both `--format sarif` and `--ci` are net-new. Added an
  explicit "Asymmetry worth surfacing:" line with the per-verb breakdown.
- Q5's resolution presented `audit --base ... --ci` as the default
  Action command without a temporal qualifier — consumers reading just
  Q5 would assume it's runnable today. Added "Note: this command is the
  target state — both flags ship in Slice 1 alongside the Action; the
  default isn't runnable on the current CLI."

Both clarifications also help future PR reviewers spot whether
implementation slices match the documented surface set.

Author: SutuSebastian