feat: Telegram OSINT map layer, Osiris intel ports, and maritime settings

Add Telegram OSINT with hourly incremental t.me scraping, metro geocoding
separate from news centroids, threat-intercept popup UI with inline media,
and HTML markers above alert boxes so pins stay clickable. Expose GFW_API_TOKEN
in onboarding and Settings Maritime; harden GFW/CCTV/geo fetchers. Port Osiris-
derived recon, SCM, entity graph, malware/cyber feeds, sanctions, and submarine
cable layers with tests and documentation.

Co-authored-by: Cursor <cursoragent@cursor.com>

frontend/src/__tests__/hooks/useDataPollingViewport.test.ts

@@ -0,0 +1,26 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+
+import { VIEWPORT_COMMITTED_EVENT } from '@/components/map/hooks/useViewportBounds';
+import { setLiveDataBounds } from '@/lib/liveDataViewport';
+
+describe('viewport fast refetch wiring', () => {
+  beforeEach(() => {
+    vi.useFakeTimers();
+    setLiveDataBounds({ south: 10, west: 20, north: 12, east: 22 });
+  });
+
+  afterEach(() => {
+    setLiveDataBounds(null);
+    vi.useRealTimers();
+    vi.restoreAllMocks();
+  });
+
+  it('VIEWPORT_COMMITTED_EVENT is a stable custom event name', () => {
+    expect(VIEWPORT_COMMITTED_EVENT).toBe('shadowbroker:viewport-committed');
+    const handler = vi.fn();
+    window.addEventListener(VIEWPORT_COMMITTED_EVENT, handler);
+    window.dispatchEvent(new CustomEvent(VIEWPORT_COMMITTED_EVENT));
+    expect(handler).toHaveBeenCalledTimes(1);
+    window.removeEventListener(VIEWPORT_COMMITTED_EVENT, handler);
+  });
+});