* test(#3796): the audit report writer and readers must agree on the filename
* fix(#3796): write the audit report to the single-version filename every reader expects
* chore(#3796): changeset fragment (pr number backfilled after PR creation)
* chore(#3796): backfill changeset PR number (4007)
---------
Co-authored-by: sim <sim@local>
