feat: Claude Code Monitor — lanes, pipelines and a merged workspace

Internal SmartGift build of a Claude Code monitoring dashboard.

Lanes: a durable unit of parallel agent work, one per working directory,
tracked across session restarts. Managed lanes are git worktrees the
dashboard provisions and can reset or remove behind a three-check destroy
guard and a counted preflight; adopted lanes are directories you already
own and are never destroyable.

Pipelines: a lane moves through pipeline stages. A stage the agent declares
with evidence renders green; a stage inferred from the tool-event stream
renders dashed amber and never counts as done. Detection is forward-only
within a 30-minute window, and never writes the declared stage.

Workspace: one page at /run with a lane grid, the selected lane's pipeline,
and a full Claude console behind a disclosure.

monitoring/prometheus/prometheus-native.yml

@@ -0,0 +1,26 @@
+# Prometheus scrape config for a NATIVE (non-Docker) CCAM + monitoring stack.
+#
+# Use this when Prometheus runs directly on the host (Homebrew, apt, a release
+# tarball, etc.) and the dashboard is a plain `npm start` on loopback :4820.
+# No DASHBOARD_ALLOWED_HOSTS override is required — 127.0.0.1 is already
+# accepted by the server's Host guard.
+#
+# Started by: monitoring/scripts/start-native.sh  (or npm run monitoring:native)
+# See ../README.md.
+global:
+  scrape_interval: 15s
+  scrape_timeout: 10s
+
+rule_files:
+  - ccam-rules.yml
+
+scrape_configs:
+  - job_name: ccam
+    metrics_path: /api/metrics
+    static_configs:
+      - targets: ["127.0.0.1:4820"]
+    # If the server sets DASHBOARD_TOKEN (LAN deployments), uncomment and fill in
+    # so the scrape passes the token guard:
+    # authorization:
+    #   type: Bearer
+    #   credentials: "<DASHBOARD_TOKEN>"