Start Sotyhub platform core

[descambiado]

Summary

• start BOFA's Sotyhub Platform Core work on top of v2.9.1
• fix two hunter workflow issues from the previous review
• add a first shared projects layer to unify SaaS, bounty, labs and tooling context

Included in this slice

• fix review queue snapshot scoping so API responses match the reported snapshot
• refresh tactical bounty views after workspace updates in the frontend
• add projects, project_members and project_environments
• allow bounty workspaces to link to a project
• allow project-aware access to linked workspaces and project runs
• add a first Projects page in the UI

Validation

• python -m py_compile api/database.py api/main.py api/run_manager.py core/bounty_service.py core/project_service.py tools/verify_bounty_system.py
• python tools/verify_bounty_system.py
• python tools/verify_runtime_hardening.py
• python tools/verify_control_plane.py
• node_modules\\.bin\\tsc.cmd --noEmit -p tsconfig.app.json
• npm.cmd run build

Notes

This PR is intentionally opened as a draft. It is the first platform-core slice, not the full v2.10.0 end state yet.