feat: pentest campaigns inline editing, CVSS calculator, security har…

[0xmanhnv]

…dening

Campaign detail sheet:

• Full inline editing (description, timeline, methodology, tags, objectives, scope, RoE)
• Header fields editable (name, type, priority, client name/contact)
• Hybrid scope: linked assets + asset groups + manual scope items
• RoE redesign: 3 grouped sections with presets (schedule, methods, contacts)
• Collapsible header, scroll lock, team member enrichment

Backend:

• created_by_name resolved via batch user lookup
• CreateTemplateInput JSON tags for correct field mapping
• UpdateTemplate now applies all fields (was only name/severity/category)
• Validation modules (attack_simulation, control_testing) seeded
• CONCURRENTLY removed from migration indexes (incompatible with transaction)

Security:

• Request body size limits (1MB) on all decode handlers
• ILIKE search injection fix (escape %, _, )
• Permission checks on campaign buttons