feat: human-readable risk-level UI

[salazarsebas]

Summary

Implements issue #9. The assessment card no longer prints the raw RiskLevel enum (0-4).

Labels, color, icon, and a short hint live in riskPresentation.ts so the mapping is exhaustive at compile time:

• None: No known risk
• Low: Low
• Elevated: Elevated - review before sending
• High: High
• Critical: Critical - send blocked

Matched patterns render as a plain-language category, confidence percent, and evidence snippet. No raw JSON.

Stacked on #26 (feat/detect-address-network) because both touch apps/web/src/App.tsx. Merge #26 first, then retarget this PR to main (or merge this into that branch).

Test plan

• pnpm --filter @custos/web test
• pnpm run test (root now includes apps/**)
• pnpm run build / typecheck / web build
• Trigger None / Elevated / Critical in the UI and confirm the numeric enum is gone
• Confirm a text match shows category + evidence, not a JSON blob

Closes #9

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 5fc01960-c26d-49ec-9fd2-a4f253eba0e9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}