Feature/phase 4 dashboard

[temporalzone]

Summary

Description

This PR implements Phase 4 (Security Dashboard + Auto-Remediation Workflow) for the ZeroClaw Scanner. It adds a Streamlit-based control panel, integrates auto-verification pipelines, and provides detailed in-app remediation tutorials for scanner findings.

Key Features Added & Modified:

1. 🔐 Streamlit Security Dashboard (dashboard.py):

   • Live repository / Git URL scan launcher with team/stream auto-inference.
   • Global status metrics (Total, Critical, High, Medium findings and Unresolved counts).
   • In-app interactive expanders to view code findings, AI-agent reasoning logs, and suggested code fixes.
   • Stream Scorecards to evaluate team scores dynamically based on active vulnerabilities.

2. 🔍 Automated Verification Pipeline (verify_fix.py):

   • Connects status updates to automated re-scans.
   • Auto-checks if a vulnerability is still present in the codebase when a developer marks it as "Fixed".
   • Updates status to "Verified" or "Fixed (unverified)" based on scan outcomes.

3. 📘 Local Remediation Guides (remediation/):

   • Added markdown tutorials explaining fixes for SQL Injection (sqli.md), Command Injection (command-injection.md), Row Level Security gaps (missing-rls.md), Unpinned dependencies (unpinned-deps.md), Hardcoded secrets, and XSS.
   • Renders tutorials contextually inside the dashboard depending on the vulnerability type.

4. ⚙️ Scanners and Client Enhancements:

   • Refined agent_client.py integration to parse model reasoning and code remediation patches.
   • Updated static scanner modules to support programmatic execution.

---

How to Test

1. Run Tests: Verify all unit tests pass:

   python -m pytest