feat(ui): premium refinement pass + React Flow service map (#111) #211

Job	Run time
Gitleaks (secret scan)	8s
Trivy (filesystem + container scan)	15s
jscpd (duplication < 3% on touched code)	15s
Semgrep (SAST)	25s
SBOM (SPDX + CycloneDX)	21s
OSV-Scanner (SCA)	6s
	1m 30s

Provide feedback