fix: complete intelligence layer refreshes and UAP fallback

backend/services/layer_enable_refresh.py

@@ -17,7 +17,18 @@ _INSTANT_LAYER_KEYS: frozenset[str] = frozenset(
 # Background — network-bound OR large local scans (full CCTV SELECT can stall
 # the single uvicorn worker if run inline on enable).
 _SLOW_LAYER_KEYS: frozenset[str] = frozenset(
-    {"cctv", "firms", "psk_reporter", "fishing_activity"}
+    {
+        "cctv",
+        "firms",
+        "psk_reporter",
+        "fishing_activity",
+        "uap_sightings",
+        "malware_c2",
+        "cyber_threats",
+        "scm_suppliers",
+        "telegram_osint",
+        "gt_risk",
+    }
 )
 
 
@@ -85,6 +96,42 @@ def _slow_fetch(key: str) -> None:
         fetch_fishing_activity()
         logger.info("Fishing activity loaded (layer enabled)")
         return
+    if key == "uap_sightings":
+        from services.fetchers.earth_observation import fetch_uap_sightings
+
+        fetch_uap_sightings()
+        logger.info("UAP sightings loaded (layer enabled)")
+        return
+    if key == "malware_c2":
+        from services.fetchers.malware import fetch_malware_threats
+
+        fetch_malware_threats()
+        logger.info("Malware C2 loaded (layer enabled)")
+        return
+    if key == "cyber_threats":
+        from services.fetchers.cyber_status import fetch_cyber_threats
+
+        fetch_cyber_threats()
+        logger.info("Cyber threats loaded (layer enabled)")
+        return
+    if key == "scm_suppliers":
+        from services.scm.suppliers import fetch_scm_suppliers
+
+        fetch_scm_suppliers()
+        logger.info("SCM suppliers loaded (layer enabled)")
+        return
+    if key == "telegram_osint":
+        from services.fetchers.telegram_osint import fetch_telegram_osint
+
+        fetch_telegram_osint()
+        logger.info("Telegram OSINT loaded (layer enabled)")
+        return
+    if key == "gt_risk":
+        from analytics.integration import maybe_refresh_gt_analytics
+
+        maybe_refresh_gt_analytics()
+        logger.info("Strategic Risk Analytics refreshed (layer enabled)")
+        return
     raise KeyError(key)