- Migrations: nawasara_agents, nawasara_security_incidents, nawasara_agent_heartbeats
- Models: Agent, SecurityIncident, AgentHeartbeat with helpers (statusColor, typeLabel, etc.)
- API: POST /api/agent/register, /incidents, /heartbeat via AgentController (X-Agent-Key auth)
- Livewire: Agents index (stats + table), Incidents index (table with severity/type filter)
- Menu: added Agents + Incidents submenu items to security workspace
- PermissionSeeder: added secscan.agent.view + secscan.agent.delete