Add AD audit scripts (Python/LDAP and PowerShell/RSAT)

Read-only structural/health audit of Active Directory: OU tree, user
and computer account status/hygiene flags, and group breakdown. Two
equivalent implementations depending on available access -- raw LDAP
via ldap3, or Get-AD* cmdlets via RSAT on a domain-joined machine.

.gitignore

@@ -0,0 +1,17 @@
+# Audit output - contains real directory data, never commit
+reports/
+*.json
+*.csv
+
+# Local config/secrets
+config/*
+!config/.gitkeep
+
+# Python
+__pycache__/
+*.pyc
+.venv/
+venv/
+
+# OS cruft
+.DS_Store