Restore ARGUS v4 agent-native (was clobbered by stale v2) + fixes

- Restore full v4: API keys, /api/scan, /docs, /openapi.json, /mcp MCP endpoint, subscriptions, AD-audit + creds scans
- Add missing /api/login (premium owner login, permanent sub key)
- Fix agent_report CoT leak: enable_thinking:false + reasoning_effort:low
- Add Ollama fallback chain (.128 qwen3.8fast -> .186 ornith-1.5:9b)
- Fix Kali API params: naabu uses 'host', wpscan uses 'url'
- Fix creds_scan hydra contract (target+service+username)
- Fix run_osint: missing 'ssh' command (sshpass -p X ssh -o ...)
- Harden sub_active against naive datetime

argus.service

@@ -0,0 +1,13 @@
+[Unit]
+Description=ARGUS Security Platform
+After=network.target
+
+[Service]
+WorkingDirectory=/opt/argus
+ExecStart=/usr/bin/python3 /opt/argus/app.py
+Restart=always
+RestartSec=3
+Environment=PYTHONUNBUFFERED=1
+
+[Install]
+WantedBy=multi-user.target

nginx-argus.conf

@@ -0,0 +1,13 @@
+server {
+    listen 80;
+    server_name argus.thetempleofdoom.com;
+
+    location / {
+        proxy_pass http://127.0.0.1:5000;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_read_timeout 600s;
+    }
+}