C7: Fingerprinter::analyze_cold dispatch (DNS + RDAP)

[filipeforattini]

Parent

#46

What to build

Fingerprinter::analyze_cold(host: &str, dns: &DnsClient, rdap: &RdapClient) -> Vec<Detection> is a new async method gated behind operator opt-in. It resolves A/AAAA/CNAME records via the existing discovery::dns client, queries RDAP for the resolved IP via the existing discovery::rdap client, then calls DnsSource::classify_cnames and AsnSource::classify with the results.

Never auto-runs from process_job. The CLI surface in C13 enables it via --deep-fingerprint; programmatic callers invoke analyze_cold directly.

Acceptance criteria

• Fingerprinter::analyze_cold(host, &dns_client, &rdap_client) -> Vec<Detection> implemented
• Resolves CNAME chain via existing discovery::dns (no new external dep)
• Queries RDAP via existing discovery::rdap (no new external dep)
• Feeds CNAMEs to DnsSource::classify_cnames
• Feeds ASN + org to AsnSource::classify
• Does NOT auto-run from Crawler::process_job
• New integration test against mocked DNS + RDAP fixtures
• NDJSON regression byte-stable

Blocked by

• C5: TargetContext widening with Warm/Cold optional slots #49