AUTARCH v1.9 — remote monitoring, SSH manager, daemon, vault, cleanup

- Add Remote Monitoring Station with PIAP device profile system
- Add SSH/SSHD manager with fail2ban integration
- Add privileged daemon architecture for safe root operations
- Add encrypted vault, HAL memory, HAL auto-analyst
- Add network security suite, module creator, codex training
- Add start.sh launcher script and GTK3 desktop launcher
- Remove Output/ build artifacts, installer files, loose docs
- Update .gitignore for runtime data and build artifacts
- Update README for v1.9 with new launch method, screenshots, and features

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

web/templates/threat_intel.html

@@ -350,6 +350,7 @@ function iocAdd() {
         document.getElementById('ioc-tags').value = '';
         document.getElementById('ioc-desc').value = '';
         iocLoad();
+        halAnalyze('Threat Intel', JSON.stringify(data, null, 2), 'threat intelligence', 'defense');
     });
 }
 
@@ -357,6 +358,7 @@ function iocLoad() {
     fetchJSON('/threat-intel/iocs').then(function(data) {
         _iocCache = data.iocs || [];
         iocRender(_iocCache);
+        halAnalyze('Threat Intel', JSON.stringify(data, null, 2), 'threat intelligence', 'defense');
     });
 }
 
@@ -536,6 +538,7 @@ function repLookup() {
             lines.push('');
         }
         renderOutput('rep-output', lines.join('\n'));
+        halAnalyze('Threat Intel', JSON.stringify(data, null, 2), 'threat intelligence', 'defense');
     }).catch(function() { setLoading(btn, false); });
 }
 
@@ -547,6 +550,7 @@ function blGenerate() {
     }).then(function(data) {
         if (data.error) { renderOutput('bl-output', 'Error: ' + data.error); return; }
         renderOutput('bl-output', data.blocklist || 'No IOCs match the selected criteria.');
+        halAnalyze('Threat Intel', JSON.stringify(data, null, 2), 'threat intelligence', 'defense');
     });
 }