feat: RMM Overshell, IT Glue audit/write-back, LogLift, link-aware bundles, dashboard overhaul

- RMM Overshell (migration 077): admin page, dispatch UI, executor/worker, target
  resolver, script registry (AD/DHCP/DNS/event-log/services/software/network/loglift)
- LogLift evidence pipeline (migration 078): upload webhook, B2 storage client,
  receiver/matcher, EventLogCollector PowerShell script
- IT Glue audit + write-back (migrations 075, 076): asset-audit runner, ticket
  xrefs, applications/configurations browse pages + apply/revert/audit endpoints
- Link-aware analyzer bundles (migration 073) + provider toggle (migration 074):
  link-discovery service, OpenRouter LLM provider, related-tickets/itglue-suggestion
  panels, analyze-bundle endpoint
- Endpoint data model + device-link reconciliation (migrations 079, 080): conflicts
  admin page, reconciler service, resolve endpoints
- Dashboard overhaul: integration-health service + alerts, overview/health endpoints
- Permissions: add itglue + rmm scopes; middleware: public /api/rmm/loglift route

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

components/navigation/app-navigation.tsx

@@ -6,27 +6,13 @@ import { cn } from '@/lib/utils';
 import {
   LayoutDashboard,
   Server,
-  Network,
-  Globe,
-  Smartphone,
   Database,
-  RefreshCw,
-  ChevronDown,
   Activity,
   HardDrive,
-  Workflow,
-  GitBranch,
   Sparkles,
-  Bell,
-  Zap,
-  Radio,
-  Shield,
   Users,
   TrendingUp,
-  Sun,
   BarChart3,
-  DollarSign,
-  SlidersHorizontal,
   GitCompare,
   Brain,
   Search,
@@ -130,115 +116,25 @@ const navigationItems: NavItem[] = [
         icon: AlertTriangle,
         description: 'Analyses flagged for human review (low confidence or cost-ceiling skipped Opus)',
       },
+      {
+        title: 'IT Glue — Applications',
+        href: '/analyzer/itglue/applications',
+        icon: Database,
+        description: 'Audit IT Glue Application records against ticket history; admins can apply or revert documentation changes',
+      },
+      {
+        title: 'IT Glue — Configurations',
+        href: '/analyzer/itglue/configurations',
+        icon: Database,
+        description: 'Audit IT Glue Configuration records (servers, workstations, devices) against ticket history; admins can apply or revert',
+      },
     ],
   },
   {
     title: 'Admin',
+    href: '/admin',
     icon: Activity,
-    children: [
-      {
-        title: 'Integrations & Sync',
-        href: '/admin/sync',
-        icon: RefreshCw,
-        description: 'Manage sync across PSA, RMM, NMS, Backup, and Apple RMM'
-      },
-      {
-        title: 'NMS Mapping (Auvik)',
-        href: '/auvik-mappings',
-        icon: Network,
-        description: 'Map Auvik tenants to companies'
-      },
-      {
-        title: 'RMM Mapping (Datto)',
-        href: '/rmm-mappings',
-        icon: Globe,
-        description: 'Map RMM sites to companies'
-      },
-      {
-        title: 'Zabbix WAN Monitor',
-        href: '/admin/zabbix-wan',
-        icon: Radio,
-        description: 'Sync RMM site WAN IPs to Zabbix with Autotask routing'
-      },
-      {
-        title: 'Apple RMM Mapping (Addigy)',
-        href: '/addigy-mappings',
-        icon: Smartphone,
-        description: 'Map Addigy devices to companies'
-      },
-      {
-        title: 'Ticket Workflows',
-        href: '/admin/workflow',
-        icon: Workflow,
-        description: 'Automated ticket triage and classification'
-      },
-      {
-        title: 'Classification Rules',
-        href: '/admin/workflow/classification-rules',
-        icon: GitBranch,
-        description: 'Keyword-based classification rules'
-      },
-      {
-        title: 'AI Templates',
-        href: '/admin/workflow/ai-templates',
-        icon: Sparkles,
-        description: 'AI prompt templates for enhancement'
-      },
-      {
-        title: 'Webhook Pipelines',
-        href: '/admin/workflow/pipelines',
-        icon: Zap,
-        description: 'Automated webhook processing workflows'
-      },
-      {
-        title: 'Morning NOC Summary',
-        href: '/admin/morning-summary',
-        icon: Sun,
-        description: 'Daily Zabbix overnight summary posted to Teams channels via webhook'
-      },
-      {
-        title: 'Ticket Digest Reports',
-        href: '/admin/ticket-digest',
-        icon: BarChart3,
-        description: 'LLM-analyzed ticket reports — noise, SLA, workload — daily/weekly/monthly'
-      },
-      {
-        title: 'Notification Channels',
-        href: '/admin/workflow/channels',
-        icon: Bell,
-        description: 'Teams, Telegram, and webhook notifications'
-      },
-      {
-        title: 'IT Glue Sync',
-        href: '/admin/sync/itglue',
-        icon: Shield,
-        description: 'IT Glue documentation backup — organizations, configs, passwords, flexible assets'
-      },
-      {
-        title: 'SentinelOne Sync',
-        href: '/admin/sync/sentinelone',
-        icon: Shield,
-        description: 'SentinelOne EDR — sites, agents, threats sync'
-      },
-      {
-        title: 'QuickBooks Online',
-        href: '/admin/qbo',
-        icon: DollarSign,
-        description: 'Sync invoices, payments, deposits, transactions and financial reports'
-      },
-      {
-        title: 'Display Settings',
-        href: '/admin/display-settings',
-        icon: SlidersHorizontal,
-        description: 'Configure company filters for Kiosk and Mobile dashboards'
-      },
-      {
-        title: 'Data Browser',
-        href: '/admin/data-browser',
-        icon: Database,
-        description: 'Browse and query system data'
-      },
-    ]
+    description: 'Sync, mappings, workflow, reports, tools & access'
   },
 ];