Merge pull request #9 from thomasxm/feat/velociraptor-integration

fix: Windows netstat artifact split, missing filter, hostname regex escaping

fix: address code review findings — VQL injection, API contract, timeline, private API

docs: add Velociraptor improvement plans and update README

fix: unify investigation state singleton and wire SIEM auto-capture

fix: persist active investigation to disk for cross-client IoC sharing

feat: add DFIR knowledge resources and MCPBridge resource reading

test: add Velociraptor integration tests

feat: integrate Velociraptor endpoint forensics into CrowdSentinel MCP server

Merge pull request #8 from thomasxm/feat/codeql-nuclei-ci

fix: improve Nuclei template accuracy from code review feedback

feat: add shellcheck, actionlint, yamllint, pip-audit pre-commit hooks

feat: add CodeQL and Nuclei DAST as non-blocking CI jobs

Merge pull request #7 from thomasxm/feat/harness-engineering

feat: harness module with docs, helpers, and pytest markers