fix: round 2 audit fixes, updated emulator profiles

Scripts:
- fix generate_site nav regex destroying mkdocs.yml content
- fix auto_fetch comma-separated MD5 in find_missing
- fix verify print_platform_result conflating untested/missing
- fix validate_pr path traversal and symlink check
- fix batocera_scraper brace counting and escaped quotes in strings
- fix emudeck_scraper hash search crossing function boundaries
- fix pipeline.py cwd to repo root via Path(__file__)
- normalize SHA1 comparison to lowercase in generate_pack

Emulator profiles:
- emux_gb/nes/sms: reclassify from alias to standalone profiles
- ep128emu: remove .info-only files not referenced in source
- fbalpha2012 variants: full source-verified profiles
- fbneo_cps12: add new profile

scripts/pipeline.py

@@ -21,13 +21,15 @@ import json
 import subprocess
 import sys
 import time
+from pathlib import Path
 
 
 def run(cmd: list[str], label: str) -> tuple[bool, str]:
     """Run a command. Returns (success, captured_output)."""
     print(f"\n--- {label} ---", flush=True)
     start = time.monotonic()
-    result = subprocess.run(cmd, capture_output=True, text=True, cwd=".")
+    repo_root = str(Path(__file__).resolve().parent.parent)
+    result = subprocess.run(cmd, capture_output=True, text=True, cwd=repo_root)
     elapsed = time.monotonic() - start
 
     output = result.stdout