add rule generalization, sized LLM defaults, ops docs, and UI polish

Feedback rules can now be suggested for merging when a human has already
reviewed the same pattern multiple times (never guesses about new values).
LLM defaults sized for constrained VRAM instead of llama3.3/llama3.1.
Adds systemd units, a state backup script, and reverse-proxy auth guidance
for production deployment. Findings view is collapsible and sorts
suggested-review rows to the top for a quicker overview.

systemd/signalscope-monitor.service

@@ -0,0 +1,30 @@
+[Unit]
+Description=SignalScope continuous monitor
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+User=signalscope
+Group=signalscope
+WorkingDirectory=/opt/signalscope
+# To enable the local Ollama dashboard assessment, add to ExecStart below:
+#   --llm --llm-interval 300 --llm-timeout 180 --model qwen2.5:7b-instruct
+ExecStart=/opt/signalscope/.venv/bin/fgai monitor \
+    --logs /opt/signalscope/logs/fg_syslog.jsonl \
+    --output /opt/signalscope/state/fgai-status.json \
+    --interval 10 \
+    --baseline-db /opt/signalscope/state/fgai-baseline.sqlite3 \
+    --history-db /opt/signalscope/state/signalscope-history.sqlite3 \
+    --status-cache-db /opt/signalscope/state/signalscope-status-cache.sqlite3 \
+    --config-file /opt/signalscope/state/fgai-config.json
+Restart=on-failure
+RestartSec=5
+NoNewPrivileges=true
+PrivateTmp=true
+ProtectSystem=strict
+ProtectHome=true
+ReadWritePaths=/opt/signalscope/state /opt/signalscope/logs /opt/signalscope/run
+
+[Install]
+WantedBy=multi-user.target