harden review findings fallback

Keep --profile separate from findings handles, fail requested handles when no findings exist, and quote generated view commands for copy-paste safety.

Add focused regressions for the non-interactive findings paths.