feat: SAC daily reports from DB aggregation (notif-32)

- Aggregate report.daily.ssh/rdp from 24h ingest; job and systemd timer

- notify_daily_report bypasses NOTIFY_MIN_SEVERITY; ingest routes agent reports

- HTML templates, env SAC_DAILY_REPORT_*, docs and tests (56 cases)

Co-authored-by: Cursor <cursoragent@cursor.com>

docs/testing-e2e-checklist.md

@@ -11,7 +11,7 @@
 - [ ] Неудачный SSH → `ssh.login.failed`
 - [ ] `SERVER_DISPLAY_NAME` задан → в SAC **Хосты** отображается display name
 - [ ] Heartbeat → `agent.heartbeat`, хост не `stale` в пределах `SAC_HEARTBEAT_STALE_MINUTES`
-- [ ] Daily report → `report.daily.ssh` (если включён)
+- [ ] Daily report → `report.daily.ssh` (агент или SAC: `python -m app.jobs.daily_report --force`, `details.generated_by`)
 
 ### Windows (RDP-login-monitor, `UseSAC=dual`)