Control Tower

Case Explorer runs from server-side case list (`/audit/cases`) and opens event evidence on demand.