feat: finalize phase3 closure (tenancy, replay, marketplace)

[ogulcanaydogan]

Summary

This PR formalizes Phase 3 full closure with production-ready implementation and docs for:

• Multi-tenant runtime policy support (tenancy.*, PIF_TENANCY_*)
• Replay/forensics pipeline with local JSONL store (replay.*, PIF_REPLAY_*)
• Community rule marketplace CLI (marketplace.*, PIF_MARKETPLACE_*)
• Dashboard replay APIs and UI panel
• Roadmap/docs/changelog updates (Phase 3 items now marked complete)

Public Interface Changes

• New config/env surfaces:
  • tenancy.* / PIF_TENANCY_*
  • replay.* / PIF_REPLAY_*
  • marketplace.* / PIF_MARKETPLACE_*
• New dashboard APIs:
  • GET /api/dashboard/replays
  • GET /api/dashboard/replays/{id}
  • POST /api/dashboard/replays/{id}/rescan
• New CLI commands:
  • pif marketplace list
  • pif marketplace install <id>@<version>
  • pif marketplace update

Validation Evidence

Local gates

• go test ./... ✅
• go test -race ./... ✅
  • macOS linker warning observed (known): malformed LC_DYSYMTAB
• Coverage:
  • go test ./... -coverprofile=coverage.out
  • go tool cover -func=coverage.out | tail -n 1
  • total: 80.2% ✅

Smoke checks

• Tenant policy behavior (different action/threshold path) ✅
  • go test ./pkg/proxy -run 'TestScanMiddlewareWithOptions_TenantPolicyOverrides|TestDashboardReplayEndpoints'
• Replay list/detail/rescan API path ✅
  • covered via TestDashboardReplayEndpoints
• Marketplace list/install/update flow ✅
  • go test ./internal/cli -run 'TestMarketplaceCommands_EnabledFlow'

Commit Breakdown

1. feat: tenancy + replay/forensics + marketplace + dashboard/runtime integration
2. test: new and updated unit/integration coverage
3. docs: README + API reference + changelog + roadmap closure

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.