Flownomaly: Single-Step Conditional-Mean Recovery for Few-Shot Anomaly Detection — ThinkLLM