feat(ctops): add CT Ops inventory connector

[simonjcarr]

Summary

• add CT Ops service-token auth, inventory snapshot API, and connection health endpoint to CT-CVE
• persist CT Ops host/package inventory, snapshot idempotency, nonce replay state, and connector health
• match accepted inventory snapshots immediately and deliver signed finding batches back to CT Ops
• document CT_CVE_CT_OPS_CONNECTIONS configuration

Validation

• go test ./...
• CTOPS targeted connector validation: node --experimental-strip-types --test lib/integrations/ct-cve/connection-status.test.mjs lib/integrations/ct-cve/finding-ingest.test.mjs lib/integrations/ct-cve/inventory-export.test.mjs lib/integrations/ct-cve/inventory-push-job.test.mjs lib/integrations/ct-cve/service-token.test.mjs lib/integrations/ct-cve/setup-status.test.mjs

Notes

• Docker-backed migration smoke testing could not run because the local Docker daemon is unavailable.
• Full CTOPS pnpm --filter web test:unit was attempted and failed in unrelated existing areas: agent binary integrity assertion, Docker-dependent CT-CVE nonce-store test, and missing bcrypt-pbkdf for password-manager SSH-key tests.