AUTARCH v1.9 — remote monitoring, SSH manager, daemon, vault, cleanup

- Add Remote Monitoring Station with PIAP device profile system
- Add SSH/SSHD manager with fail2ban integration
- Add privileged daemon architecture for safe root operations
- Add encrypted vault, HAL memory, HAL auto-analyst
- Add network security suite, module creator, codex training
- Add start.sh launcher script and GTK3 desktop launcher
- Remove Output/ build artifacts, installer files, loose docs
- Update .gitignore for runtime data and build artifacts
- Update README for v1.9 with new launch method, screenshots, and features

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

web/templates/incident_resp.html

@@ -401,6 +401,7 @@ function irCreate() {
         document.getElementById('ir-name').value = '';
         document.getElementById('ir-desc').value = '';
         irLoadList();
+        halAnalyze('Incident Response', JSON.stringify(data, null, 2), 'incident response', 'defense');
     }).catch(function() { setLoading(btn, false); });
 }
 
@@ -432,6 +433,7 @@ function irLoadList() {
             body.innerHTML = '<tr><td colspan="7" style="text-align:center;color:var(--text-muted)">No incidents found</td></tr>';
         }
         irPopulateSelectors();
+        halAnalyze('Incident Response', JSON.stringify(data, null, 2), 'incident response', 'defense');
     });
 }
 
@@ -451,6 +453,7 @@ function irSelect(id) {
         document.getElementById('ir-detail-desc').textContent = inc.description || '';
         document.getElementById('ir-update-status').value = inc.status === 'closed' ? 'resolved' : inc.status;
         irLoadPlaybook(id, inc);
+        halAnalyze('Incident Response', JSON.stringify(inc, null, 2), 'incident response', 'defense');
     });
 }
 
@@ -636,6 +639,7 @@ function swSweep() {
         if (!swLastMatches.length) {
             body.innerHTML = '<tr><td colspan="5" style="text-align:center;color:var(--text-muted)">No matches found - system appears clean</td></tr>';
         }
+        halAnalyze('Incident Response', JSON.stringify(data, null, 2), 'incident response', 'defense');
     }).catch(function() { setLoading(btn, false); });
 }
 
@@ -789,6 +793,7 @@ function tlGenReport() {
 
         document.getElementById('tl-report-content').innerHTML = html;
         sec.scrollIntoView({behavior: 'smooth'});
+        halAnalyze('Incident Response', JSON.stringify(rpt, null, 2), 'incident response', 'defense');
     });
 }