feat(secubox-threats): v1.1.0 — centralised threats dashboard (closes #312) (#313)

Operator request: 'travailler une vraie interface avec tous les
metrics centralises dedies sur https://admin.gk2.secubox.in/threats/'.

Rebuilt www/threats/index.html on the canonical SecuBox scaffold:
* body display:flex, sidebar 220px fixed, .main padding-top 48px
* WALL palette (Charte SecuBox §Six Module Color System, #9A6010)
* Five-stat strip: threat level, active threats, alerts 24h, IOCs
  tracked, open incidents.
* 2-col row: 24h hourly alert timeline (histogram) + risk score
  breakdown.
* 3-col row x2: recent alerts, top IOCs, open incidents, alert
  sources, threat feeds, recent reports — every endpoint exposed by
  api/main.py is wired up.
* Auto-refresh every 30s on the volatile panels.

Co-authored-by: CyberMind-FR <gandalf@Gk2.net>

packages/secubox-threats/debian/changelog

@@ -1,3 +1,18 @@
+secubox-threats (1.1.0-1~bookworm1) bookworm; urgency=medium
+
+  * www/threats/index.html: rebuild as the canonical centralised threats
+    dashboard (#312). Single page surfacing every relevant
+    /api/v1/threats/* endpoint: status (threat level pill), timeline
+    (24h hourly bucket histogram), scores (overall + breakdown),
+    recent alerts, top IOCs, open incidents, alert sources, feeds,
+    reports. Five-stat strip across the top, three-card rows below.
+    Canonical SecuBox scaffold (body display:flex, sidebar 220px fixed,
+    .main reserving 48px for the global-menu-bar). Charter WALL palette
+    (#9A6010 yellow/amber). Auto-refresh every 30s on the volatile
+    panels (status, timeline, alerts).
+
+ -- Gerald Kerma <devel@cybermind.fr>  Thu, 21 May 2026 13:00:00 +0000
+
 secubox-threats (1.0.0-1~bookworm1) bookworm; urgency=medium
 
   * Initial release