AUTARCH v1.9 — remote monitoring, SSH manager, daemon, vault, cleanup

- Add Remote Monitoring Station with PIAP device profile system
- Add SSH/SSHD manager with fail2ban integration
- Add privileged daemon architecture for safe root operations
- Add encrypted vault, HAL memory, HAL auto-analyst
- Add network security suite, module creator, codex training
- Add start.sh launcher script and GTK3 desktop launcher
- Remove Output/ build artifacts, installer files, loose docs
- Update .gitignore for runtime data and build artifacts
- Update README for v1.9 with new launch method, screenshots, and features

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

web/templates/dns_service.html

@@ -735,6 +735,7 @@ function checkDNS() {
             el.innerHTML = 'Status: <span style="color:var(--text-muted);font-weight:600">STOPPED</span>';
             document.getElementById('dns-metrics').textContent = '';
         }
+        halAnalyze('DNS Service', JSON.stringify(d, null, 2), 'dns query', 'network');
     });
 }
 
@@ -780,6 +781,7 @@ function loadZones() {
             s.innerHTML = opts;
             if (_currentZone) s.value = _currentZone;
         });
+        halAnalyze('DNS Service', JSON.stringify(d, null, 2), 'dns query', 'network');
     });
 }
 
@@ -834,6 +836,7 @@ function loadRecords() {
     fetch(`/dns/zones/${zone}/records`).then(r => r.json()).then(d => {
         _allRecords = (d.ok && d.records) ? d.records : [];
         filterRecords();
+        halAnalyze('DNS Service', JSON.stringify(d, null, 2), 'dns query', 'network');
     });
 }
 
@@ -945,6 +948,7 @@ function exportZone() {
         if (!d.ok) { alert(d.error); return; }
         document.getElementById('exp-output').style.display = '';
         document.getElementById('exp-text').value = d.zone_file || d.data || JSON.stringify(d, null, 2);
+        halAnalyze('DNS Service', JSON.stringify(d, null, 2), 'dns query', 'network');
     });
 }
 
@@ -1140,6 +1144,7 @@ function loadConfig() {
         // Hosts
         document.getElementById('cfg-hosts-file').value = c.hosts_file || '';
         document.getElementById('cfg-hosts-autoload').checked = c.hosts_auto_load === true;
+        halAnalyze('DNS Service', JSON.stringify(d, null, 2), 'dns query', 'network');
     });
 }
 
@@ -1208,6 +1213,7 @@ function ezScanNetwork() {
         ezRenderHosts();
 
         document.getElementById('ez-scan-status').innerHTML = `<span style="color:#4ade80">Found ${_ezHosts.length} hosts on ${d.subnet || 'network'}</span>`;
+        halAnalyze('DNS Service', JSON.stringify(d, null, 2), 'dns query', 'network');
     }).catch(e => {
         document.getElementById('ez-scan-status').innerHTML = `<span style="color:var(--danger)">Scan failed: ${e.message}</span>`;
     });