Self-hosted CVE intelligence: explainable prioritization, Change Radar, replayable snapshots, read-only API. One Docker image.