#219 Add wally shannon, deepsec and vvah: three hosted security harnesses

The single 0.8.14 release of the hosted security-audit harnesses. Folds in #223 (deepsec + vvah) on top of shannon.

Three harnesses, one pattern: each resolves the model from the signed-in account (or WALLY_CLOUD_KEY), writes the tool's own config pointed at <console>/v1, sets the key in the child's environment only, and otherwise passes the tool's own arguments through.

Command	Tool	Wiring
wally shannon	Keygraph Shannon 3.4.0 (npx/Docker)	Pi models.json, SHANNON_AI_MODEL=runanywhere:<id>, SHANNON_AI_API_KEY
wally deepsec	DeepSec 2.3.10 (npx)	Pi models.json, --ai-provider runanywhere --ai-base-url <base> --ai-api-key-env WALLY_DEEPSEC_API_KEY
wally vvah	Visa VVAH 1.5.1 (pip venv)	config.local.yaml roles {via: openai}, OPENAI_BASE_URL / OPENAI_API_KEY

End-to-end test (dev, signed in as a granted account)

• Unit: 614 lib tests pass, 53 of them harness-specific (shannon/deepsec/vvah).
• deepsec handoff: resolves deepseek-v4.1-flash-1017-uncensored through .../api-dev/v1, writes the Pi models.json (openai-completions), passes the custom-route flags and WALLY_DEEPSEC_API_KEY.
• vvah handoff: writes config.local.yaml mapping every role to the model {via: openai}, sets OPENAI_BASE_URL=.../api-dev/v1 and OPENAI_API_KEY.
• shannon: a real Shannon scan launched through Wally reached Recon, calling the model.
• Model call: the endpoint all three point at serves the model with the account's bearer (200, real completion).

🤖 Generated with Claude Code

Summary by CodeRabbit

• New Features
  • Added wally shannon for running Shannon scans, selecting an account model, and passing through commands.
  • Added wally deepsec and wally vvah for security testing and repository scans, with model selection and command options.
• Documentation
  • Added setup guidance for prerequisites, account access, credentials, command usage, and authorization requirements.
• Updates
  • Updated Wally to version 0.8.14.