feat: Telegram OSINT map layer, Osiris intel ports, and maritime settings

Add Telegram OSINT with hourly incremental t.me scraping, metro geocoding
separate from news centroids, threat-intercept popup UI with inline media,
and HTML markers above alert boxes so pins stay clickable. Expose GFW_API_TOKEN
in onboarding and Settings Maritime; harden GFW/CCTV/geo fetchers. Port Osiris-
derived recon, SCM, entity graph, malware/cyber feeds, sanctions, and submarine
cable layers with tests and documentation.

Co-authored-by: Cursor <cursoragent@cursor.com>

frontend/src/__tests__/utils/viewportPrivacy.test.ts

@@ -5,6 +5,10 @@ import {
   coarsenViewBounds,
   expandBoundsToRadius,
 } from '@/lib/viewportPrivacy';
+import {
+  liveDataBoundsKey,
+  setLiveDataBounds,
+} from '@/lib/liveDataViewport';
 
 describe('viewport privacy helper', () => {
   it('coarsens narrow bounds outward without clipping the original view', () => {
@@ -45,6 +49,14 @@ describe('viewport privacy helper', () => {
     expect(b).toBe(a);
   });
 
+  it('liveDataBoundsKey matches quantized fetch params and clears for world view', () => {
+    setLiveDataBounds({ south: 33.6, west: -84.5, north: 33.8, east: -84.2 });
+    expect(liveDataBoundsKey()).toBe('33,-85,34,-84');
+
+    setLiveDataBounds(null);
+    expect(liveDataBoundsKey()).toBeNull();
+  });
+
   it('expands bounds to a fixed preload radius around the current view center', () => {
     const original = {
       south: 39.55,