Add recon upload hunter and admin surface probing for owned-target scans.

Extend web crawl with multipart/drag-drop/JS upload ranking and probe common admin paths for 200 vs 401/403 signals in scan JSON.

server/internal/recon/relay_scan.go

@@ -92,7 +92,7 @@ func LocalRelayScan(req RelayScanRequest) (*RelayScanReport, error) {
 	return &RelayScanReport{
 		Host: host, ScannedAt: time.Now().UTC(), LocalReachable: true, ScannedVia: "server",
 		Ports: ports, UDPHints: udp, PathTracerHints: PathTracerHintsFromUDP(udp),
-		Recommendations: BuildRecommendations(ports, nil, nil, shell.Host, false),
+		Recommendations: BuildRecommendations(ports, nil, nil, host, false),
 	}, nil
 }