feat: Phase 1 — ARIA ATM threat monitoring service

- Spring Boot service on port 8095, database hiveiq_aria
- Flyway schema: threat_ioc, threat_event, precursor_sequence_alert, device_security_posture
- FBI FLASH-20260219-001 IOC seed data (executables, MD5s, directories, registry keys, services)
- ThreatEventClassifier — maps 20+ signal keys to severity + attack phase + IOC match
- ThreatEventIngestionService — persists events, publishes HIGH/CRITICAL to Kafka
- Kafka producer: topic hiveops.aria.threats (AriaThreatEvent payload)
- ThreatIocController — CRUD IOC management (MSP_ADMIN/BCOS_ADMIN)
- ThreatEventIngestionController — agent-facing ingest endpoint with service secret auth
- CI/CD: cd-develop.yml + cd-main.yml

build.sh

@@ -0,0 +1,28 @@
+#!/bin/bash
+set -e
+
+REGISTRY="registry.bcos.cloud"
+SHOULD_PUSH=false
+
+while [[ "$#" -gt 0 ]]; do
+    case $1 in
+        --registry) REGISTRY="$2"; shift ;;
+        --push) SHOULD_PUSH=true ;;
+    esac
+    shift
+done
+
+IMAGE="$REGISTRY/hiveiq-aria:latest"
+
+echo "Building JAR..."
+mvn clean package -DskipTests -B
+
+echo "Building Docker image: $IMAGE"
+docker build -t "$IMAGE" .
+
+if [ "$SHOULD_PUSH" = true ]; then
+    echo "Pushing $IMAGE..."
+    docker push "$IMAGE"
+fi
+
+echo "Done: $IMAGE"