fix(leads): stop scanning the businesses a project discovers

[ralyodio]

Finding leads queued a free CrawlProof scan of every domain it turned up, and new campaigns did the same on every tick.

That only ever made sense for one pitch. The scan supplies findings for "we scanned your site, here's what we found" — so a project pitching its own offer gets nothing from it while still paying for it:

• worker time spent producing evidence nobody will cite
• a scanner pointed at people whose only involvement was appearing in a search result
• prospects stranded at "new", waiting on a scan nothing was going to read

Changes

• One-shot lead finding never scans. findLeadsAction passes skipScan, so discovery goes straight to contact lookup. The scanning count it used to report is gone rather than left reporting zero.
• New campaigns default to scanning off.
• Selecting the audit pitch turns it back on, since that pitch can't be written without findings — that's the escape hatch for the CrawlProof project itself.
• The lead finder's own description promised a scan it no longer performs, so that copy goes too.

Checks

• tsc --noEmit clean
• 748/748 tests pass
• production build compiles

🤖 Generated with Claude Code

[github-actions]

vu1nz Security Review

0 finding(s) in PR #?

No security issues found.