docs(bf-2pq5z): document fuzz dependency verification findings

Verified fuzz infrastructure dependencies:
- PASS: cargo-fuzz 0.13.1 installed
- PASS: Rust nightly 1.98.0 toolchain supports fuzzing
- PASS: fuzz/fuzz_targets/ directory exists with 5 working targets
- FAIL: content.rs fuzz target does not exist (critical dependency issue)

Parent beads (bf-2mzuw, bf-2g0kn) reference non-existent 'content' fuzz target.
Available targets: lexer, object_parser, xref, stream_decoder, cmap_parser.

Closes bf-2pq5z

notes/bf-2pq5z.md

@@ -0,0 +1,71 @@
+# Fuzz Dependency Verification - bf-2pq5z
+
+## Task
+Verify fuzz dependencies are installed for the content.rs fuzz harness.
+
+## Findings
+
+### ✅ PASS: cargo-fuzz Installation
+- **Status**: Installed and working
+- **Version**: cargo-fuzz 0.13.1
+- **Command**: `cargo fuzz --version` succeeded
+
+### ✅ PASS: Rust Toolchain
+- **Status**: Supports fuzzing
+- **Version**: rustc 1.98.0-nightly (f20a92ec0 2026-06-07)
+- **Cargo**: 1.98.0-nightly (0b1123a48 2026-06-01)
+
+### ✅ PASS: Fuzz Harness Directory
+- **Status**: Directory exists and contains fuzz targets
+- **Location**: `fuzz/fuzz_targets/`
+- **Available targets**: 5 fuzz targets found
+  - `cmap_parser.rs`
+  - `lexer.rs`
+  - `object_parser.rs`
+  - `stream_decoder.rs`
+  - `xref.rs`
+
+### ❌ FAIL: content.rs Fuzz Target
+- **Status**: NOT FOUND
+- **Expected**: `fuzz/fuzz_targets/content.rs`
+- **Found**: The file does not exist
+- **Verified by**: `test -f fuzz/fuzz_targets/content.rs` returned false
+
+## Critical Issue
+
+The parent beads (bf-2mzuw, bf-2g0kn) reference a non-existent `content` fuzz target:
+
+1. **bf-2mzuw** (closed) claims to verify "the content.rs fuzz harness compiles" with command `cargo fuzz build content`
+2. **bf-2g0kn** (in_progress) expects to run `cargo fuzz run content -- -max_total_time=5`
+3. **fuzz/Cargo.toml** defines 5 fuzz targets but NO `content` target
+
+This is a **dependency chain inconsistency**. The content.rs fuzz target was never created, but dependent beads were written as if it existed.
+
+## Available Fuzz Targets
+
+The actual fuzz infrastructure includes these working targets:
+- `lexer` - PDF lexer fuzzing
+- `object_parser` - PDF object parsing fuzzing  
+- `xref` - Cross-reference table fuzzing
+- `stream_decoder` - PDF stream decoding fuzzing
+- `cmap_parser` - Character map parsing fuzzing
+
+## Recommendation
+
+Before running fuzz tests (bf-2g0kn), the dependency chain needs resolution:
+1. Either create the missing `content.rs` fuzz target, OR
+2. Update dependent beads to reference existing fuzz targets
+
+## Acceptance Criteria Status
+
+| Criterion | Status | Result |
+|-----------|--------|--------|
+| `cargo fuzz --version` succeeds | ✅ PASS | Version 0.13.1 |
+| fuzz/fuzz_targets/content.rs exists | ❌ FAIL | File NOT found |
+| No missing dependency errors | ⚠️ WARN | Missing target itself |
+
+## Conclusion
+
+Fuzz **dependencies** (cargo-fuzz, Rust toolchain, harness infrastructure) are properly installed and working. However, the specific **content.rs fuzz target** referenced by this bead and its parent does not exist in the codebase.
+
+**Note**: This verification exposes a pre-existing dependency chain issue that existed before this bead started. The parent bead (bf-2mzuw) was incorrectly closed despite the content.rs target not existing.