[docs] Document the gh aw audit --no-baseline flag

The --no-baseline flag shipped in #63012 but was documented nowhere in
docs/src/content/docs. Add it to the audit reference flag table with a
note on the cache behavior that keeps an opt-out result from suppressing
a later default audit, and correct the exhaustive options list in the CLI
setup page, which also omitted --group.

Co-Authored-By: Claude Code <noreply@anthropic.com>

Author: github-actions[bot]

docs/src/content/docs/reference/audit.md

@@ -34,9 +34,16 @@ In single-run mode, a job URL without a step anchor extracts the first failing s
 | `--verbose` | off | Print detailed progress information |
 | `--format <fmt>` | `pretty` | Diff output format: `pretty` or `markdown` (multi-run only) |
 | `--group` | off | Group audit findings so each `[run, code]` pair appears once with an occurrence count and representative entry |
+| `--no-baseline` | off | Skip baseline lookup and comparison for single-run audits; the Comparison section reports no baseline found |
 
 Top-level fields in `--json` output are stable; nested sub-fields may be extended but are not removed without deprecation. Add `--parse` to populate `behavior_fingerprint` and `agentic_assessments`.
 
+By default a single-run audit looks up an earlier run of the same workflow and renders a Comparison section against it. Use `--no-baseline` to audit a run on its own — for example when the baseline run is unrepresentative, or to avoid the extra downloads the lookup performs. A `--no-baseline` result is never written to the audit cache, so it cannot suppress the Comparison section of a later default audit of the same run.
+
+```bash
+gh aw audit 1234567890 --no-baseline
+```
+
 **Single-run examples:**
 
 ```bash

docs/src/content/docs/setup/cli.md

@@ -594,7 +594,7 @@ cat run-ids.txt | gh aw audit --stdin --repo owner/repo
 gh aw audit 1234567890 --runtime cloud-hypervisor        # Skip run unless sandbox agent runtime matches
 ```
 
-**Options:** `--artifacts`, `--evals`, `--experiment`, `--format`, `--json/-j`, `--output/-o`, `--parse`, `--repo/-r`, `--runtime`, `--stdin`, `--variant`
+**Options:** `--artifacts`, `--evals`, `--experiment`, `--format`, `--group`, `--json/-j`, `--no-baseline`, `--output/-o`, `--parse`, `--repo/-r`, `--runtime`, `--stdin`, `--variant`
 
 The `--repo` flag accepts `owner/repo` format and is required when passing a bare numeric run ID without a full URL, allowing the command to locate the correct repository.