fix: correct CampaignsView, analysis.py IPv4 split, entities date filter

- CampaignsView: update ClusterData interface to match real API response
  (severity/unique_ips/score instead of threat_level/total_ips/confidence_range)
  Fix fetch to use data.items, rewrite ClusterCard and BehavioralTab
  Remove unused getClassificationColor and THREAT_ORDER constants
- analysis.py: fix IPv4Address object has no attribute 'split' on line 322
  Add str() conversion before calling .split('.')
- entities.py: fix Date vs DateTime comparison — log_date is a Date column,
  comparing against now()-INTERVAL HOUR caused yesterday's entries to be excluded
  Use toDate(now() - INTERVAL X HOUR) for correct Date-level comparison

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

frontend/src/components/InvestigationPanel.tsx

@@ -41,6 +41,7 @@ export function InvestigationPanel({ entityType, entityValue, onClose }: Investi
   const [data, setData] = useState<EntityData | null>(null);
   const [loading, setLoading] = useState(true);
   const [classifying, setClassifying] = useState(false);
+  const [showAllUA, setShowAllUA] = useState(false);
 
   useEffect(() => {
     const fetchData = async () => {
@@ -193,9 +194,9 @@ export function InvestigationPanel({ entityType, entityValue, onClose }: Investi
                     🤖 User-Agents ({data.attributes.user_agents.length})
                   </div>
                   <div className="space-y-2">
-                    {data.attributes.user_agents.slice(0, 5).map((ua: any, idx: number) => (
+                    {(showAllUA ? data.attributes.user_agents : data.attributes.user_agents.slice(0, 5)).map((ua: any, idx: number) => (
                       <div key={idx} className="bg-background-card rounded-lg p-3">
-                        <div className="text-xs text-text-primary font-mono break-all">
+                        <div className="text-xs text-text-primary font-mono break-all leading-relaxed">
                           {ua.value}
                         </div>
                         <div className="text-xs text-text-secondary mt-1">
@@ -203,6 +204,14 @@ export function InvestigationPanel({ entityType, entityValue, onClose }: Investi
                         </div>
                       </div>
                     ))}
+                    {data.attributes.user_agents.length > 5 && (
+                      <button
+                        onClick={() => setShowAllUA(v => !v)}
+                        className="w-full text-xs text-accent-primary hover:text-accent-primary/80 transition-colors"
+                      >
+                        {showAllUA ? '↑ Réduire' : `↓ Voir les ${data.attributes.user_agents.length - 5} autres`}
+                      </button>
+                    )}
                   </div>
                 </div>
               )}