Spec Kitty

Mission Run: Derive the mission-state audit's CI trigger list from what the audit executes

Replace the two hand-copied lists of the modules the mission-state audit touches with one derived, drift-proof check.

The mission-state audit's CI trigger (ci-router.yml mission_state group) and a second copy in tests (AUDIT_INPUT_PATHS) are both hand-written from a one-time call trace, so they can drift from the modules the audit actually executes and from each other. When the audit executes a module outside the globs, a PR that changes the audit's verdict skips the audit (the #6058 incident), caught only by the nightly backstop after merge. This mission adds a non-vacuous test that derives the executed-module set from an in-process audit run and removes the hand copy.