Phase 3: conversations, Follow TCP Stream, DNS explorer, TLS metadata explorer, statistics

Conversations and statistics are computed from the SQLite summary index (across
segments); stream payload via tshark follow; DNS/TLS fields via tshark. TLS is
metadata-only and labelled 'encrypted pass-through' throughout.

internal/api/server.go

@@ -81,6 +81,7 @@ func (s *Server) Handler() http.Handler {
 
 	s.networkRoutes(priv)
 	s.captureRoutes(priv)
+	s.analysisRoutes(priv)
 
 	if s.Web != nil {
 		files := http.FileServerFS(s.Web)