flush-log-unbounded-growth-requires-rotation

flush.log reached 357KB without any rotation policy. It needs an active monitoring threshold + rotation command (truncate -s 0 or log rotate config), plus a .gitignore entry to prevent accidental commits. The session added log rotation and .gitignore as part of Stage 1 remediation. Any long-running agent log file must have rotation baked in at creation time per the proactive-cleanup-hooks feedback.