Generation Provenance

How each sigma playbook was generated — template/ATT&CK source per question, plus the full _generation_meta audit block. Derived from sigma/*.yaml; regenerate with python3 _meta/build_generation_meta.py.