feat(threat-intel): public-source IOC route as R44 (#103 rebase) (#112)

* feat: add public-source threat intelligence

* fix(routing): assign threat-intel to R44, not ADF R42

Keep analysis-decision-framework R42 as experimental YARA.
Public-source IOC / OSINT route is R44. Restore 5 benchmark cases.

---------

Co-authored-by: kriptoburak <kriptoburak@users.noreply.github.com>