add baseline and sqlite

src/fgai/cli.py

@@ -203,6 +203,7 @@ def run_monitor(args: argparse.Namespace) -> int:
         llm_interval=args.llm_interval,
         llm_model=args.model,
         llm_timeout=args.llm_timeout,
+        baseline_path=args.baseline_db,
     )
     return 0
 
@@ -285,6 +286,7 @@ def build_parser() -> argparse.ArgumentParser:
     monitor.add_argument("--policies", default=None, help="Optional FortiGate policy JSON/config file to audit continuously")
     monitor.add_argument("--interval", type=int, default=10, help="Seconds between analysis runs")
     monitor.add_argument("--anomaly-limit", type=int, default=20, help="Maximum anomaly findings to include")
+    monitor.add_argument("--baseline-db", default="state/fgai-baseline.sqlite3", help="SQLite database for historical behavior baselines")
     monitor.add_argument("--llm", action="store_true", help="Generate cached Ollama analyst note for dashboard")
     monitor.add_argument("--llm-interval", type=int, default=300, help="Seconds between Ollama dashboard assessments")
     monitor.add_argument("--model", default=None, help="Ollama model name")