feat(modules): add Feodo Tracker C2 feed

[rissrice2105-agent]

Summary

• add a defensive feodo-tracker module backed by the public abuse.ch CSV feed
• emit active botnet C2 indicators by default, with persistent deduplication and bounded polling
• validate endpoints, require HTTPS, and document configuration and data-source terms
• add focused parser and event-mapping tests plus workspace metadata

Safety

The module only consumes public threat intelligence. It does not scan, contact, or attempt to exploit listed infrastructure.

Testing

• pnpm --filter @threatcrush/sdk build
• pnpm --filter threatcrush-module-feodo-tracker build
• pnpm --filter threatcrush-module-feodo-tracker test (4 tests passing)