Add device intelligence and secure traffic inspection

[Adam-Ghanem]

Summary

• add privacy-aware local device identity with same-segment MAC evidence, private/randomized-MAC labeling, local IEEE OUI lookup, manufacturer, model-family, device-type, and cautious OS hints
• persist and display device identity evidence across scans, host checks, inventory, exports, and the liquid-glass dashboard
• add an Operator/Admin-only offline PCAP/PCAPNG Traffic Inspector with bounded metadata parsing and Wireshark-style protocol, endpoint, conversation, and packet tables
• enforce explicit authorization, audit-integrity gating, rate/concurrency/byte/packet/row limits, no raw-payload response or persistence, and DNS-name opt-in
• migrate SQLite inventory metadata to schema version 9 and update deployment/security/acceptance documentation

Validation

• 181 broad regression tests passed locally (1 pandas-backed export test deselected because the inherited local virtualenv has incompatible compiled NumPy/Pandas wheels; GitHub CI installs a clean environment and runs the complete suite)
• 56 focused device identity, traffic parser, inventory, scanner-boundary, and operations tests passed
• Black, isort, Flake8, mypy, Bandit, Python compile, JavaScript syntax, diff whitespace, and secret-boundary checks passed

Safety scope

Traffic inspection is deliberately offline and metadata-only. It does not enable live promiscuous capture, payload search, replay, injection, stealth, exploitation, brute force, or credential testing. Use is limited to networks and captures the operator owns or is explicitly authorized to assess.