feat: build the contacts worklist, host only

Adds the fourth non-negotiable property: a query carries a bare host or
IP and never a URL. An RDAP query discloses what the user is looking at,
and a URL path can carry recipient identity that parse deliberately
flags rather than redacts, because a path segment may be the thing being
reported. That decision is safe only while the URL stays local.

Property 1 governs what is published and a query appears in no report,
so property 1 does not cover this and this property does.

Hosts fold, so twenty URLs on one host make one query while the item
keeps every indicator id behind it.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Wrfqr2xqQfhtXCscU7zrdz

0 files changed, 0 insertions, 0 deletions