Add service attribution and destination intelligence

[XploitGost]

Summary

• add deterministic metadata-only Service Attribution Engine and local fingerprint registry
• enrich flow, ring, event, persistence, Inspect, Flow Details, and Ops paths
• add confidence/evidence metrics, packaged-registry validation, docs, and focused tests

Validation

• Backend: 329/329 passing
• Frontend: 49/49 passing
• Frontend build: successful
• pip check: clean
• benchmark smoke: 2000 processed, 0 dropped, 0 failed
• PyInstaller build and packaged backend smoke: successful
• production npm audit: 0 vulnerabilities

Boundaries

Metadata only. No TLS decryption, MITM, credential collection, browser history/cookie/session inspection, command/control, Agent raw forwarding, IPS, or autonomous actions.