feat: eBPF blind spot monitors + hybrid report generation

[badchars]

Summary

• Add 20 eBPF blind spot monitors for kernel subsystem evasion detection (io_uring, memfd, ptrace, cross-process memory, userfaultfd, BPF integrity, netlink, seccomp, mmap, zerocopy, VDSO, keyring, namespace, ioctl, mount, FUSE, perf, BPF map, LD_PRELOAD, futex)
• Add hybrid report generation system: generate_report tool compiles all session data server-side (zero token cost) into structured Markdown with AI placeholder sections for executive summary, risk assessment, and remediation priorities
• Add /report TUI slash command with summary dialog
• Add "Export Report" button in Web UI session header
• Add API routes for report data compilation and markdown download
• Regenerate SDK with new reportCompile and reportDownload methods

Test plan

• Backend typecheck passes (bunx tsc --noEmit)
• Frontend typecheck passes (bunx tsc --noEmit)
• Backend tests pass (1130 pass, 0 fail)
• All 11 packages pass turbo typecheck on push
• Verify /report slash command in TUI opens report summary dialog
• Verify "Export Report" button visible in Web UI session header
• Verify generate_report tool produces correct Markdown output in agent session

🤖 Generated with Claude Code

[github-actions]

Thanks for your contribution!

This PR doesn't have a linked issue. All PRs must reference an existing issue.

Please:

1. Open an issue describing the bug/feature (if one doesn't exist)
2. Add Fixes #<number> or Closes #<number> to this PR description

See CONTRIBUTING.md for details.