clarify docs re config: no caching, and uses default scanners (not all available)
top-level `src test` cmd