Set the static-only ingestion and partial-scan policy

## Question

What public GitHub URL, clone, file-count, repository-size, timeout, memory, output, concurrency, cancellation, cleanup, retry, and partial-result rules make direct analyzer subprocesses safe enough for the MVP while never installing dependencies or executing repository-owned code?
