Heimcloud Ops

Incident ingest + admin. Phase 1 — no Hermes client, no auto-fix, no auto-merge.

Open admin

Ingest: POST /api/incidents with Authorization: Bearer … or X-Ops-Secret.