feat(phase-35): Jira + Tempo integration with internal worklogs

Full Jira/Tempo pipeline: link Aegis entities to Jira issues, auto-sync
status hourly, log time internally with integrity hashing, and optionally
push worklogs to Tempo.

- 1.1 JiraLink model + Worklog model: Alembic migration b020 with indexes,
  enums (jiralinkentitytype, jirasyncdirection), and integrity_hash column
- 1.2 Jira service: atlassian-python-api wrapper with lazy singleton client,
  search/create/sync operations, feature-flagged via JIRA_ENABLED
- 1.3 Jira router: CRUD endpoints for /jira/links, /jira/search,
  /jira/create-issue with audit logging and entity-to-issue auto-creation
- 1.4 Tempo service: worklog push via tempo-api-python-client, auto-log from
  test completions when TEMPO_ENABLED, graceful fallback on failure
- 1.5 Worklog service + router: immutable internal time records with SHA-256
  integrity hash, CRUD at /worklogs, /worklogs/{id}/verify endpoint
- 1.6 Frontend: JiraLinkPanel component (search, link, sync, unlink) and
  WorklogTimeline component (timeline view, manual log form) integrated into
  TestDetailPage sidebar, CampaignDetailPage grid, TechniqueDetailPage
- 1.7 Jira sync job: APScheduler hourly job syncs all links from Jira,
  registered in background scheduler alongside existing jobs

frontend/src/pages/CampaignDetailPage.tsx

@@ -28,6 +28,8 @@ import {
 } from "../api/campaigns";
 import { useAuth } from "../context/AuthContext";
 import CampaignTimeline from "../components/CampaignTimeline";
+import JiraLinkPanel from "../components/JiraLinkPanel";
+import WorklogTimeline from "../components/WorklogTimeline";
 
 const statusColors: Record<string, string> = {
   draft: "bg-gray-800/50 text-gray-400 border-gray-600/30",
@@ -598,6 +600,12 @@ export default function CampaignDetailPage() {
         )}
       </div>
 
+      {/* Jira & Worklogs */}
+      <div className="grid gap-6 lg:grid-cols-2">
+        <JiraLinkPanel entityType="campaign" entityId={campaignId!} />
+        <WorklogTimeline entityType="campaign" entityId={campaignId!} />
+      </div>
+
       {/* Toast notification */}
       {toast && (
         <div

frontend/src/pages/TechniqueDetailPage.tsx

@@ -23,6 +23,7 @@ import { getTechniqueByMitreId, markTechniqueReviewed } from "../api/techniques"
 import { getTemplatesByTechnique } from "../api/test-templates";
 import { useAuth } from "../context/AuthContext";
 import TestFromTemplateForm from "../components/TestFromTemplateForm";
+import JiraLinkPanel from "../components/JiraLinkPanel";
 import type { TechniqueStatus, TestState, TestResult } from "../types/models";
 
 const statusBadgeColors: Record<TechniqueStatus, string> = {
@@ -447,6 +448,11 @@ export default function TechniqueDetailPage() {
         </div>
       )}
 
+      {/* Jira Integration */}
+      {technique && (
+        <JiraLinkPanel entityType="technique" entityId={technique.id} />
+      )}
+
       {/* Template instantiation modal */}
       {templateFormId && technique && (
         <TestFromTemplateForm

frontend/src/pages/TestDetailPage.tsx

@@ -24,6 +24,8 @@ import TestDetailHeader from "../components/test-detail/TestDetailHeader";
 import TeamTabs from "../components/test-detail/TeamTabs";
 import ValidationModal from "../components/test-detail/ValidationModal";
 import ConfirmDialog from "../components/ConfirmDialog";
+import JiraLinkPanel from "../components/JiraLinkPanel";
+import WorklogTimeline from "../components/WorklogTimeline";
 
 // ── Page Component ─────────────────────────────────────────────────
 
@@ -498,6 +500,12 @@ export default function TestDetailPage() {
               </div>
             </div>
           )}
+
+          {/* Jira Integration */}
+          <JiraLinkPanel entityType="test" entityId={testId!} />
+
+          {/* Time Tracking */}
+          <WorklogTimeline entityType="test" entityId={testId!} />
         </div>
       </div>