Release ML Detection Mode

• Detection architecture (ETW sessions, 7-stage pipeline, 17 threat indicators)
• ML integration (model details, 14-feature vector, quality metrics, detection modes)
• Canary file system
• Automated response capabilities
• Self-protection (DACL hardening)
• Ransomware extension database (60+ families)
• GUI features (Dashboard, Threats, History, ML Detection, Configuration)