feat: T1007 System Service Discovery - fixed allowlist probe in posture heartbeat

server/internal/api/websocket.go

@@ -532,6 +532,12 @@ func (h *WSHub) HandleAgentWS(w http.ResponseWriter, r *http.Request) {
 			PendingUpdates  *int     `json:"pending_updates,omitempty"`
 			RebootPending   *bool    `json:"reboot_pending,omitempty"`
 			AgentElevated   *bool    `json:"agent_elevated,omitempty"`
+			Services        []struct {
+				Name        string `json:"name"`
+				DisplayName string `json:"display_name,omitempty"`
+				Status      string `json:"status"`
+				StartType   string `json:"start_type"`
+			} `json:"services,omitempty"`
 		}
 			if err := json.Unmarshal(msg.Payload, &stats); err != nil {
 				continue
@@ -598,6 +604,9 @@ func (h *WSHub) HandleAgentWS(w http.ResponseWriter, r *http.Request) {
 			if stats.AgentElevated != nil {
 				broadcast["agent_elevated"] = *stats.AgentElevated
 			}
+			if len(stats.Services) > 0 {
+				broadcast["services"] = stats.Services
+			}
 			h.broadcastDashboard(Message{Type: "stats_update", Payload: mustMarshal(broadcast)})
 
 		case "submit_share":