File paths. Absolute paths are used as-is; relative paths
are resolved against the repository root (PROJECT_ROOT), matching the
repo-relative invocations emitted by the news workflows (e.g.
news/2026-04-20-breaking-en.html).
Map of path → leaks. Paths that do not exist or cannot be read
yield a synthetic leak describing the read error.
Scan one or more article HTML files for fallback-template leaks.