=== ClamAV check ===
no clamscan in PATH
no clamav package installed

→ ClamAV NO instalado en cde-38q702. Esto es intencional: DOKS managed nodes
  no permiten paquetes custom; la cobertura anti-malware es vía Falco (eBPF runtime)
  + Wazuh (rootcheck + FIM + signatures DB).
