feat(web): add CT-CVE inventory export helper

[simonjcarr]

Summary

• add CT Ops CT-CVE inventory snapshot construction for active hosts and current software package rows
• add signed outbound snapshot push helper for the CT-CVE inventory endpoint
• require the intended connection:read scope for CT Ops connection health and update token docs/examples
• update migration/progress tracking for the Phase 9 inventory export slice

Validation

• pnpm install --frozen-lockfile
• pnpm --dir apps/web run type-check
• pnpm --dir apps/web run test:unit
• pnpm --dir apps/web exec eslint lib/integrations/ct-cve/inventory-export.ts lib/integrations/ct-cve/inventory-export.test.mjs lib/integrations/ct-cve/service-token.test.mjs app/api/integrations/ct-cve/v1/connection-health/route.ts

Remaining Phase 9 Work

• automated inventory push wiring after connector setup/software inventory changes
• durable CT-CVE connection status timestamps