[Adam-Ghanem]

NetWatch mint light frontend (merged)

• Applied the selected pastel-mint sidebar, white cards, emerald primary actions, accessible navigation, lighter tables/forms and mobile-responsive dashboard styling.
• Added locally persistent Light/Dark toggle, retaining the existing dark SOC interface and Cyan/Violet/Emerald accents.
• Left authenticated API actions, network scopes, role gates, and server-sourced metrics intact. No fabricated production telemetry.
• Added frontend appearance/integration tests and JavaScript syntax checks in Security CI.

Dependency security fix

• Pinned Pillow 13.0.0 in supported production requirements.
• Current Streamlit 1.66.0 still caps Pillow below 13. As a fail-closed measure, disabled the old legacy Streamlit Docker Compose profile/Makefile execution while retaining source in app.py for reference.
• Updated deployment, architecture, Kali, and security documentation to describe the supported FastAPI dashboard and legacy compatibility hold.
• Added runtime dependency-boundary test so unpatched Streamlit cannot silently re-enter the production image.

Verification

• ✅ Python CI passed at d41054d, including formatting, lint, type check, and pytest.
• ✅ Security CI passed at d41054d, including pip-audit, Bandit, JavaScript checks, Docker build, non-root check, and test suite.
• ✅ Squash merged into main as f128ee5.

The previously reported Pillow audit issue is resolved for the supported FastAPI application. Legacy Streamlit stays disabled until upstream supports patched Pillow.