feat: Claude Code Monitor — lanes, pipelines and a merged workspace

Internal SmartGift build of a Claude Code monitoring dashboard.

Lanes: a durable unit of parallel agent work, one per working directory,
tracked across session restarts. Managed lanes are git worktrees the
dashboard provisions and can reset or remove behind a three-check destroy
guard and a counted preflight; adopted lanes are directories you already
own and are never destroyable.

Pipelines: a lane moves through pipeline stages. A stage the agent declares
with evidence renders green; a stage inferred from the tool-event stream
renders dashed amber and never counts as done. Detection is forward-only
within a 30-minute window, and never writes the declared stage.

Workspace: one page at /run with a lane grid, the selected lane's pipeline,
and a full Claude console behind a disclosure.

monitoring/prometheus/prometheus.yml

@@ -0,0 +1,29 @@
+# Prometheus scrape config for the CCAM dashboard's /api/metrics endpoint.
+#
+# CCAM normally runs on the HOST (a plain `npm start` on port 4820), so from
+# inside the Prometheus container it is reached via host.docker.internal. If the
+# dashboard runs elsewhere or on a different port, edit the `targets` below.
+#
+# IMPORTANT: the CCAM server's DNS-rebinding guard rejects any Host header that
+# is not loopback, so a container scrape gets 403 EBADHOST until you start the
+# server allowing this Host:
+#     DASHBOARD_ALLOWED_HOSTS=host.docker.internal npm start
+# (and, if DASHBOARD_TOKEN is set, also uncomment the authorization block below).
+# See ../README.md.
+global:
+  scrape_interval: 15s
+  scrape_timeout: 10s
+
+rule_files:
+  - ccam-rules.yml
+
+scrape_configs:
+  - job_name: ccam
+    metrics_path: /api/metrics
+    static_configs:
+      - targets: ["host.docker.internal:4820"]
+    # If the server sets DASHBOARD_TOKEN (LAN deployments), uncomment and fill in
+    # so the scrape passes the same-origin/token guard:
+    # authorization:
+    #   type: Bearer
+    #   credentials: "<DASHBOARD_TOKEN>"