Agent v0.10.0 now sends the target host per evidence entry. Surface it so an
operator can see which subdomain an attack hit (essential on WHM servers with
many cPanel domains):
- Incident detail modal: a 'Target (Subdomain)' section listing the distinct
  hosts, plus the host inline on each evidence line.
- IP timeline: per-incident host badges.
Gracefully hidden when evidence carries no host (older agents / file-scan
findings).