feat: Gemini agent investigation loop with tool-calling

feat: SQLite ledger, anomaly detection, seed command, web dashboard

scaffold: cobra CLI skeleton, package layout, project thesis