feat: RDG session flap rule, qwinsta/logoff queue and dashboard UI (0.9.13)

Detect 302→303 within 1–10s, Problem with 30s dedup, rdg_flap flag.
Agent command poll API, admin qwinsta/logoff from Overview. Migration 016.

deploy/env.native.example

@@ -79,6 +79,15 @@ SAC_BRUTE_FORCE_THRESHOLD=30
 SAC_PRIVILEGE_SPIKE_WINDOW_MINUTES=10
 SAC_PRIVILEGE_SPIKE_THRESHOLD=10
 
+# rule:rdg_session_flap (302→303)
+SAC_RDG_FLAP_WINDOW_MIN_SEC=1
+SAC_RDG_FLAP_WINDOW_MAX_SEC=10
+SAC_RDG_FLAP_DEDUP_SEC=30
+
+# qwinsta/logoff на Windows-хостах (доменный admin)
+# SAC_WIN_ADMIN_USER=B26\\Administrator
+# SAC_WIN_ADMIN_PASSWORD=
+
 # Retention (systemd sac-retention.timer)
 SAC_EVENTS_RETENTION_DAYS=90
 SAC_PROBLEMS_RETENTION_DAYS=180