Sync upstream features; preserve fork KV scanner, parsers, verifier

Brought in 35 upstream commits (MITRE heatmap, health score, dependency map,
PowerQuery playground, onboarding tracker, product grouping, modern UI redesign).

Preserved fork additions:
  backend/routers/quality.py  KV scanner, pattern refs, JS keys, JSON mode,
                              /parsers + /sync-from-sdl endpoints
  parsers/                    96 OCSF + tenant parsers
  tools/stormshield-verify/   end-to-end ingest regression test
  .gitignore                  un-ignored parsers/*
  CHANGES.md, PATCHES.md

parsers/npm_typosquats

@@ -0,0 +1,30 @@
+{
+  "columnNames": ["suspect_name", "known_target"],
+  "rows": [
+    ["expres", "express"],
+    ["loadash", "lodash"],
+    ["colorss", "colors"],
+    ["requesst", "request"],
+    ["eslint-config-airbnb-pro", "eslint-config-airbnb"],
+    ["event-stream-helper", "event-stream"],
+    ["ua-parser-utils", "ua-parser-js"],
+    ["lodash-utils", "lodash"],
+    ["lodaash", "lodash"],
+    ["expresss", "express"],
+    ["axios-lib", "axios"],
+    ["axioss", "axios"],
+    ["reactt", "react"],
+    ["react-utility", "react"],
+    ["vuetify-utils", "vuetify"],
+    ["commaander", "commander"],
+    ["yargs-plus", "yargs"],
+    ["chalkk", "chalk"],
+    ["chalk-cli", "chalk"],
+    ["nextt", "next"],
+    ["webpackk", "webpack"],
+    ["typescriptt", "typescript"],
+    ["debugg", "debug"],
+    ["moment-tz", "moment"],
+    ["uuid-gen", "uuid"]
+  ]
+}