feat(ui): premium refinement pass + React Flow service map #210

Job	Run time
Gitleaks (secret scan)	7s
jscpd (duplication < 3% on touched code)	13s
Trivy (filesystem + container scan)	8s
OSV-Scanner (SCA)	7s
SBOM (SPDX + CycloneDX)	23s
Semgrep (SAST)	42s
	1m 40s

Provide feedback