fix: correct CampaignsView, analysis.py IPv4 split, entities date filter

- CampaignsView: update ClusterData interface to match real API response
  (severity/unique_ips/score instead of threat_level/total_ips/confidence_range)
  Fix fetch to use data.items, rewrite ClusterCard and BehavioralTab
  Remove unused getClassificationColor and THREAT_ORDER constants
- analysis.py: fix IPv4Address object has no attribute 'split' on line 322
  Add str() conversion before calling .split('.')
- entities.py: fix Date vs DateTime comparison — log_date is a Date column,
  comparing against now()-INTERVAL HOUR caused yesterday's entries to be excluded
  Use toDate(now() - INTERVAL X HOUR) for correct Date-level comparison

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

frontend/src/components/EntityInvestigationView.tsx

@@ -39,6 +39,7 @@ export function EntityInvestigationView() {
   const [data, setData] = useState<EntityInvestigationData | null>(null);
   const [loading, setLoading] = useState(true);
   const [error, setError] = useState<string | null>(null);
+  const [showAllUA, setShowAllUA] = useState(false);
 
   useEffect(() => {
     if (!type || !value) {
@@ -90,10 +91,6 @@ export function EntityInvestigationView() {
     return flags[code] || code;
   };
 
-  const truncateUA = (ua: string, maxLength: number = 150) => {
-    if (ua.length <= maxLength) return ua;
-    return ua.substring(0, maxLength) + '...';
-  };
 
   if (loading) {
     return (
@@ -227,10 +224,10 @@ export function EntityInvestigationView() {
         <div className="bg-background-secondary rounded-lg p-6 mb-6">
           <h3 className="text-lg font-medium text-text-primary mb-4">3. User-Agents</h3>
           <div className="space-y-3">
-            {data.user_agents.slice(0, 10).map((ua, idx) => (
+            {(showAllUA ? data.user_agents : data.user_agents.slice(0, 10)).map((ua, idx) => (
               <div key={idx} className="bg-background-card rounded-lg p-3 space-y-2">
-                <div className="text-xs text-text-primary font-mono break-all">
-                  {truncateUA(ua.value)}
+                <div className="text-xs text-text-primary font-mono break-all leading-relaxed">
+                  {ua.value}
                 </div>
                 <div className="flex items-center gap-2">
                   <div className="text-text-secondary text-xs">{ua.count} requêtes</div>
@@ -243,9 +240,12 @@ export function EntityInvestigationView() {
             <div className="text-center text-text-secondary py-8">Aucun User-Agent</div>
           )}
           {data.user_agents.length > 10 && (
-            <div className="text-center text-text-secondary mt-4 text-sm">
-              +{data.user_agents.length - 10} autres User-Agents
-            </div>
+            <button
+              onClick={() => setShowAllUA(v => !v)}
+              className="mt-4 w-full text-xs text-accent-primary hover:text-accent-primary/80 transition-colors"
+            >
+              {showAllUA ? '↑ Réduire' : `↓ Voir les ${data.user_agents.length - 10} autres`}
+            </button>
           )}
         </div>