Auto-detects format when --format is empty: pretty when stdout is a TTY, tsv when piped/redirected. JSON emits an array of {ip, found} objects; CSV adds an 'ip,status' header row.
