[New1Direction]

Clean import-topology integration from PR #20

Ports only the tested import parser changes onto current main, now that API/schema discovery is merged through PR #28.

Included

• Bounded, commit-pinned read-only source scanning for simple single-line static relative ES imports from up to 36 selected Next.js API route handlers, with Git blob SHA verification.
• Resolve imported module paths only against same-revision GitHub tree; emit source module nodes and STATIC_IMPORTS candidate relations with source lines and evidence hashes.
• Preserve strict snapshot schema, graph disclosure, existing dark local control room and CI-only status.
• Mock integration tests and read-only real repo.ing smoke.

Limits

Regex source syntax is not an AST proof or runtime call graph, dynamic/multiline imports remain unassessed, and no production telemetry/DB access is introduced. No hosted deployment.

Merge gate

Fresh Python 3.11/3.13 and real repo.ing source smoke; only squash-merge after green checks. Earlier stacked draft #20 will remain superseded by this integration.