v0.15.0

Added

• Velociraptor triage bundles — pick artifacts → run as a fleet hunt → auto-import + synthesize (closes #30).
• Export a case to Notion, new or existing page (closes #31).
• IOCs: "⚠ Flagged only" filter (show only malicious/suspicious verdicts).

Changed

• Analyst Notebook section is now reorderable/hideable and sits after Confirmed Legitimate.

Fixed

• Velociraptor bundle collection survives a too-large artifact (skips it, larger collect cap) and supports concurrent hunts; deep links include ?org_id=.