feat(security-sidecar): implement a security tooling sidecar with tiered installer and protocol

- Add `zesdex_sec_daemon` module with main entry point for running the security daemon.
- Implement `TieredInstaller` for installing security tools from various sources (pip, binaries, gems).
- Create a newline-delimited JSON frame protocol for communication between the daemon and tools.
- Introduce a `ToolRegistry` for managing and dispatching tool executions.
- Add various tools including HTTP, SQLMap, Nuclei, and more with their respective execution logic.
- Establish health check and installation commands for tool management.
- Include prompts for classifier and quality reviewer to enhance code review and safety checks.
- Document the system's tools and guidelines for usage.

src/app/runtime/actions/mod.rs

@@ -58,16 +58,6 @@ pub enum Action {
     LessonReject {
         name: String,
     },
-    #[expect(dead_code)]
-    RecordUsage {
-        tokens_in: u64,
-        tokens_out: u64,
-        duration_ms: u64,
-    },
-    #[expect(dead_code)]
-    RecordReviewTokens {
-        tokens: u64,
-    },
     SaveSession,
     ResumeSession,
     RefreshSessions,
@@ -333,7 +323,6 @@ pub fn apply_action(state: &mut AppStateRest, action: Action) {
         Action::Tick => {
             let now_ms = chrono::Utc::now().timestamp_millis();
             state.misc.drain_expired_toasts(now_ms);
-            // Idle-time housekeeping.
     crate::app::review::maybe_run_staleness_sweep(state);
     if let Some(ref rt) = state.session_runtime {
         let _ = crate::app::review::process_pending_lessons(&rt.session_dir, &state.memory_dir);
@@ -385,10 +374,7 @@ pub fn apply_action(state: &mut AppStateRest, action: Action) {
                                 let _ = trigger_review(state);
                             }
                         } else if kind == "review" {
-                            // Track review outcome: check if lessons were found.
-                            // Format: "Quality review: <verdict> [N lesson(s)]"
                             let lessons_found = if message.contains("lesson") || message.contains("Lesson") {
-                                // Check for "N lesson(s)" pattern at end
                                 message.rsplit(' ').next().and_then(|w| {
                                     w.trim_end_matches(')').trim_end_matches('s')
                                      .split('(').next_back()
@@ -426,18 +412,6 @@ pub fn apply_action(state: &mut AppStateRest, action: Action) {
                 state.dirty = true;
             }
         }
-        Action::RecordUsage { tokens_in, tokens_out, duration_ms } => {
-            if let Some(ref mut rt) = state.session_runtime {
-                rt.record_api_call(tokens_in, tokens_out, duration_ms);
-            }
-            state.dirty = true;
-        }
-        Action::RecordReviewTokens { tokens } => {
-            if let Some(ref mut rt) = state.session_runtime {
-                rt.record_review_tokens(tokens);
-            }
-            state.dirty = true;
-        }
         Action::LessonAccept { name } => {
             if let Some(ref rt) = state.session_runtime {
                 let _ = crate::app::review::resolve_pending_lesson(
@@ -729,11 +703,9 @@ fn auto_create_retrospective(state: &mut AppStateRest) {
         }
         Ok(None) => {}
         Err(e) => {
-            // Silently handle — retrospective is best-effort.
             let _ = e;
         }
     }
-    // Attempt consensus promotion for global-scope lessons.
     let lessons: Vec<crate::model::memory::Memory> = crate::model::memory::Memory::list(&state.memory_dir)
         .iter()
         .filter_map(|n| crate::model::memory::Memory::read(&state.memory_dir, n).ok())