On vault load, detects files in non-protected subfolders via
vault_health_check. Shows an amber banner offering to flatten them
to the vault root. After migration, reloads the vault automatically.
The banner can be dismissed without migrating.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>