[bojemoi] borodino/bm12: add OSINT enrichment after host fingerprinting

Commit `f0d9fc1`

Add osint_lookup.py: synchronous OSINT module (ip-api, AlienVault OTX, ThreatCrowd + optional AbuseIPDB/VirusTotal/Shodan via env vars)
Integrate into thearm_bm12: OSINT runs after nmap scan, results merged into hosts.scan_details JSON and hosts.info flagged for malicious IPs
Dockerfile: copy osint_lookup.py to /usr/bin/
Stack: expose ABUSEIPDB_API_KEY, VIRUSTOTAL_API_KEY, SHODAN_API_KEY env vars

Co-Authored-By: Claude Sonnet 4.6 noreply@anthropic.com