feat(dashboard): rebuild SOC dashboard + fix ClickHouse SQL

Complete rewrite of the SOC dashboard using FastAPI + Jinja2 + htmx + Chart.js + Tailwind CSS.
Replaces the old React/Vite frontend with server-rendered templates.

Dashboard pages:
- Overview: KPIs, timeline chart, threat distribution, top IPs
- Detections: paginated/filterable anomaly table
- Scores: ml_all_scores with AE error & XGB prob columns
- Traffic: HTTP logs with method/host filters
- IP Investigation: full deep-dive (scores, features, HTTP logs, classify)
- Classification: SOC feedback form + history
- Features: AI + thesis feature stats
- Models: scoring stats + model metadata

API: 9 JSON endpoints with parameterized queries, sort whitelists

SQL fixes:
- 05_aggregation_tables: add deduplicate_merge_projection_mode
- 11_views: fix nested aggregate (argMax inside sum)
- 12_thesis_features: remove invalid 'let' bindings, fix groupArrayIf type

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

services/dashboard/backend/routes/pages.py

@@ -0,0 +1,53 @@
+"""HTML page routes served via Jinja2 templates."""
+
+from __future__ import annotations
+
+from fastapi import APIRouter, Request
+from fastapi.templating import Jinja2Templates
+
+router = APIRouter()
+templates = Jinja2Templates(directory="backend/templates")
+
+
+def _ctx(request: Request, page: str, **extra) -> dict:
+    return {"request": request, "active_page": page, **extra}
+
+
+@router.get("/")
+async def overview(request: Request):
+    return templates.TemplateResponse("overview.html", _ctx(request, "overview"))
+
+
+@router.get("/detections")
+async def detections(request: Request):
+    return templates.TemplateResponse("detections.html", _ctx(request, "detections"))
+
+
+@router.get("/scores")
+async def scores(request: Request):
+    return templates.TemplateResponse("scores.html", _ctx(request, "scores"))
+
+
+@router.get("/traffic")
+async def traffic(request: Request):
+    return templates.TemplateResponse("traffic.html", _ctx(request, "traffic"))
+
+
+@router.get("/ip/{ip}")
+async def ip_detail(request: Request, ip: str):
+    return templates.TemplateResponse("ip_detail.html", _ctx(request, "ip_detail", ip=ip))
+
+
+@router.get("/classify")
+async def classify(request: Request):
+    return templates.TemplateResponse("classify.html", _ctx(request, "classify"))
+
+
+@router.get("/features")
+async def features(request: Request):
+    return templates.TemplateResponse("features.html", _ctx(request, "features"))
+
+
+@router.get("/models")
+async def models(request: Request):
+    return templates.TemplateResponse("models.html", _ctx(request, "models"))