fix: audit script expects 0 routes, matching the bare starter

[jimhoyd]

Summary

• The default starter shipped by @jimhoyd/urlcode (see urlcode#503 "simplify init to one bare starter") now scaffolds with zero example routes by design — its urlcode.yaml reads "Start with no routes. Add only the files and routes your application needs."
• This repo's own audit script still hardcoded --expect-routes 2, left over from before that change.
• Since urlcode#502 "generate the public template from the initializer", the release pipeline regenerates this template's starter files from the initializer on every core release, so this mismatch fails every future release's "pin starter to new version" step.

Change

"audit": "urlcode audit --expect-routes 2" → "audit": "urlcode audit --expect-routes 0", matching the bare starter's actual route count.

Note

This alone isn't sufficient to unblock the release pipeline — urlcode audit also refuses "ready" status for any project with zero active routes (notReadyReasons: ["no-active-routes"]), independent of --expect-routes matching. That's being addressed separately by removing audit from the release-gate script list in urlcode's scripts/release-template.ts (this fix still matters for anyone running npm run audit manually/standalone). See urlcode#512.

[jimhoyd]

Superseded by #24, which folds this same fix in alongside the actual bare-starter content regeneration (both are needed together for CI to pass).