feat: complete M7 closed-loop + T7 traffic steering + Closed Loop dashboard

M7 (Observe→Analyze→Act closed-loop):
- Phase A: intentd v2 async TMF921 pipeline (LLM/Git/Porch integration)
- Phase B: Full E2E chain (E2 KPM → scale_out → Git PR → Porch Proposed)
- Phase C: DemoRunner + CLI + Grafana dashboard (16 panels) + deep code review (23 issues fixed)
- Prometheus metrics module (8 metrics, histogram p95, JSON snapshot API)

T7 (Traffic Steering):
- A1 client + PolicyType 20008 + CQI analyzer + dual-path closed-loop
- ricxapp-scaling v2.2 (Go, Redis, Prometheus, non-root, Alpine 3.21)

Frontend:
- New "Closed Loop" dashboard (5th nav tab) — Overview, E2 KPM PRB gauges,
  Pipeline latency bars, GitOps/Porch panels
- /api/metrics/json endpoint for structured metric consumption

Tests: 417 unit + 21 integration + 24 vitest = 462 total, all green

Author: thc1006

.gitignore

@@ -340,6 +340,10 @@ replace_section*
 .conductor-state.json
 **/.*-state.json
 internal/loop/.conductor-state.json
+.state/
+
+# Generated intent instance packages (created by pipeline runs / demos)
+packages/instances/intent-*
 
 # Test reports and validation artifacts
 tests/unit/test-report-*.json

deployments/xapps/scaling-xapp/.gitignore

@@ -0,0 +1 @@
+scaling-xapp

deployments/xapps/scaling-xapp/Dockerfile

@@ -0,0 +1,17 @@
+FROM golang:1.26-alpine AS builder
+
+WORKDIR /app
+COPY go.mod go.sum ./
+RUN go mod download
+
+COPY *.go ./
+RUN CGO_ENABLED=0 GOOS=linux go build -a -installsuffix cgo -o scaling-xapp .
+
+FROM alpine:3.21
+RUN apk --no-cache add ca-certificates
+WORKDIR /home/nobody
+COPY --from=builder /app/scaling-xapp .
+
+USER 65534
+EXPOSE 2112
+CMD ["./scaling-xapp"]

deployments/xapps/scaling-xapp/deployment.yaml

@@ -0,0 +1,70 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: ricxapp-scaling
+  namespace: ricxapp
+  labels:
+    app: ricxapp-scaling
+    component: xapp
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: ricxapp-scaling
+  template:
+    metadata:
+      annotations:
+        prometheus.io/path: /metrics
+        prometheus.io/port: "2112"
+        prometheus.io/scrape: "true"
+      labels:
+        app: ricxapp-scaling
+        component: xapp
+    spec:
+      serviceAccountName: scaling-xapp
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 65534
+        runAsGroup: 65534
+        fsGroup: 65534
+        seccompProfile:
+          type: RuntimeDefault
+      containers:
+      - name: scaling-xapp
+        image: scaling-xapp:latest
+        imagePullPolicy: Never
+        securityContext:
+          allowPrivilegeEscalation: false
+          readOnlyRootFilesystem: true
+          capabilities:
+            drop: ["ALL"]
+        env:
+        - name: A1_MEDIATOR_URL
+          value: "http://service-ricplt-a1mediator-http.ricplt.svc.cluster.local:10000"
+        - name: REDIS_ADDRESS
+          value: "a1-status-store.ricplt:6379"
+        - name: POLL_INTERVAL
+          value: "30s"
+        ports:
+        - containerPort: 2112
+          name: metrics
+          protocol: TCP
+        livenessProbe:
+          httpGet:
+            path: /health
+            port: 2112
+          initialDelaySeconds: 10
+          periodSeconds: 30
+        readinessProbe:
+          httpGet:
+            path: /health
+            port: 2112
+          initialDelaySeconds: 5
+          periodSeconds: 10
+        resources:
+          requests:
+            cpu: 50m
+            memory: 128Mi
+          limits:
+            cpu: 500m
+            memory: 512Mi

deployments/xapps/scaling-xapp/go.mod

@@ -0,0 +1,55 @@
+module scaling-xapp
+
+go 1.26
+
+require (
+	github.com/prometheus/client_golang v1.18.0
+	github.com/redis/go-redis/v9 v9.7.0
+	k8s.io/apimachinery v0.29.0
+	k8s.io/client-go v0.29.0
+)
+
+require (
+	github.com/beorn7/perks v1.0.1 // indirect
+	github.com/cespare/xxhash/v2 v2.2.0 // indirect
+	github.com/davecgh/go-spew v1.1.1 // indirect
+	github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f // indirect
+	github.com/emicklei/go-restful/v3 v3.11.0 // indirect
+	github.com/go-logr/logr v1.3.0 // indirect
+	github.com/go-openapi/jsonpointer v0.19.6 // indirect
+	github.com/go-openapi/jsonreference v0.20.2 // indirect
+	github.com/go-openapi/swag v0.22.3 // indirect
+	github.com/gogo/protobuf v1.3.2 // indirect
+	github.com/golang/protobuf v1.5.3 // indirect
+	github.com/google/gnostic-models v0.6.8 // indirect
+	github.com/google/gofuzz v1.2.0 // indirect
+	github.com/google/uuid v1.3.0 // indirect
+	github.com/josharian/intern v1.0.0 // indirect
+	github.com/json-iterator/go v1.1.12 // indirect
+	github.com/mailru/easyjson v0.7.7 // indirect
+	github.com/matttproud/golang_protobuf_extensions/v2 v2.0.0 // indirect
+	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
+	github.com/modern-go/reflect2 v1.0.2 // indirect
+	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
+	github.com/prometheus/client_model v0.5.0 // indirect
+	github.com/prometheus/common v0.45.0 // indirect
+	github.com/prometheus/procfs v0.12.0 // indirect
+	golang.org/x/net v0.17.0 // indirect
+	golang.org/x/oauth2 v0.12.0 // indirect
+	golang.org/x/sys v0.15.0 // indirect
+	golang.org/x/term v0.13.0 // indirect
+	golang.org/x/text v0.13.0 // indirect
+	golang.org/x/time v0.3.0 // indirect
+	google.golang.org/appengine v1.6.7 // indirect
+	google.golang.org/protobuf v1.31.0 // indirect
+	gopkg.in/inf.v0 v0.9.1 // indirect
+	gopkg.in/yaml.v2 v2.4.0 // indirect
+	gopkg.in/yaml.v3 v3.0.1 // indirect
+	k8s.io/api v0.29.0 // indirect
+	k8s.io/klog/v2 v2.110.1 // indirect
+	k8s.io/kube-openapi v0.0.0-20231010175941-2dd684a91f00 // indirect
+	k8s.io/utils v0.0.0-20230726121419-3b25d923346b // indirect
+	sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd // indirect
+	sigs.k8s.io/structured-merge-diff/v4 v4.4.1 // indirect
+	sigs.k8s.io/yaml v1.3.0 // indirect
+)