Enhance API and UI for incident management and live updates

- Added a new endpoint `/api/agg/incidents` to provide a normalized snapshot of incidents for fleet triage, including severity and recommended actions.
- Implemented live event streaming via `/api/live/events` for real-time updates on fleet status and incidents, enhancing observability.
- Updated the Web UI to include dedicated sections for incidents and live updates, improving user navigation and access to critical information.
- Enhanced API documentation to reflect new endpoints and their functionalities, ensuring clarity for developers and users.

internal/aggregate/handlers.go

@@ -35,6 +35,11 @@ type Handler struct {
 	cache   map[string]cacheEntry
 }
 
+// ResolveAliasesForLive resolves aliases for external endpoints (SSE/live).
+func (h *Handler) ResolveAliasesForLive(r *http.Request) ([]string, error) {
+	return h.resolveAliases(r)
+}
+
 // NewHandler builds an aggregate handler; client must use a non-nil Transport (e.g. gateway shared transport).
 // Geo may be nil (no GeoLite2 lookups). cacheTTL 0 disables response caching.
 func NewHandler(p *config.Parsed, client *http.Client, geo *geoip.Service, cacheTTL time.Duration) *Handler {
@@ -108,6 +113,8 @@ func (h *Handler) dispatch(w http.ResponseWriter, r *http.Request, sub string) {
 		h.handleUsers(w, r)
 	case sub == "fleet-status":
 		h.handleFleetStatus(w, r)
+	case sub == "incidents":
+		h.handleIncidents(w, r)
 	case strings.HasPrefix(sub, "user/"):
 		username := strings.TrimPrefix(sub, "user/")
 		if username == "" {
@@ -304,6 +311,18 @@ func (h *Handler) handleUserOne(w http.ResponseWriter, r *http.Request, username
 	writeAggOK(w, partial, row)
 }
 
+func (h *Handler) handleIncidents(w http.ResponseWriter, r *http.Request) {
+	aliases, err := h.resolveAliases(r)
+	if err != nil {
+		writeBadRequest(w, err)
+		return
+	}
+	ctx, cancel := context.WithTimeout(r.Context(), 60*time.Second)
+	defer cancel()
+	data, partial := BuildIncidents(ctx, h, aliases)
+	writeAggOK(w, partial, data)
+}
+
 func writeBadRequest(w http.ResponseWriter, err error) {
 	w.Header().Set("Content-Type", "application/json; charset=utf-8")
 	w.WriteHeader(http.StatusBadRequest)