Preconnect + DNS-Prefetch Hygiene

Preconnect can save ~100-300ms per render-critical third-party origin on slow networks. But too many hints, or a crossorigin attribute that doesn't match the fetch mode, makes them useless. The audit checks your and dns-prefetch hints for the typical failure modes.