fix: close audit items A3 and A4 — error detail depth and JsonObject help - #43

Two open audit items, both pre-existing on main, neither touching the public surface.

A4 — API validation errors lost the reason that explained them

When an entry in the API's errors[] array matches no known shape, the module falls back to
dumping it as JSON so something actionable still reaches the user. It dumped at -Depth 5.

That fallback runs precisely when the entry's shape is unknown, so there was no basis for
assuming the useful field sat above the cut. Past the limit PowerShell doesn't error — it
substitutes @{...}, which isn't JSON, writes a truncation warning into the caller's stream,
and drops the rest:

{"reason":"tenant not in key scope"}
→ {"L8":{"L7":{"L6":{"L5":{"L4":{"L3":"@{L2=}"}}}}}}

Now -Depth 100, matching every other ConvertTo-Json in the module.

The audit item had proposed the opposite fix — amend the contract to allow a shallow depth for
error rendering. Checking what truncation actually produces settled it the other way. Swept the
rest while here: all 30 ConvertTo-Json calls in module/Public and module/Private are now
Depth 100, and the only deliberate shallow one is the documented Format.ps1xml PolicyData
preview at Depth 3.

A3 — Get-Help never showed the JSON path

Get-InforcerReportRun, Get-InforcerReportType, Get-InforcerUser, Invoke-InforcerAssessment,
Invoke-InforcerReport and Save-InforcerReportOutput all documented -OutputType but never
demonstrated it, so Get-Help <cmdlet> -Examples gave no hint that JSON output existed.
docs/CMDLET-REFERENCE.md had covered all six for a while — only the in-shell help was short,
which is why this read as a wider docs gap than it was.

Each example follows its own file's indentation and blank-line convention (two styles are in use
across module/Public), so Get-Help renders them identically to the examples already there.

Guarded by a discovery-time scan of the source rather than a hardcoded list: every cmdlet whose
ValidateSet offers JsonObject is checked, so a new one inherits the test for free. 15 today.

Verification

Both new tests are mutation-verified — reverting each fix fails exactly the intended test and
nothing else. 467 passed, 0 failed, 2 skipped. Zero ScriptAnalyzer errors.