Add bulk-run actions and per-source rate limiting

Run-all buttons (per target and per investigation) queue every applicable,
not-already-in-flight source via a new FindingDispatcher, re-attempting
prior failures automatically. RunFinding now applies a per-source
RateLimited queue middleware so a bulk run can't hammer the free public
APIs (ip-api, crt.sh, whois, sherlock, theharvester) it depends on;
$tries raised to 30 to survive rate-limiter releases, with a failed()
handler so exhausted retries still resolve the Finding instead of leaving
it stuck pending.

Also fixes CrtShRunner treating crt.sh's intermittent 404/502 (a known
flaky free service) as fatal on the first try — added a bounded retry.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

app/Http/Controllers/InvestigationController.php

@@ -4,6 +4,7 @@ namespace App\Http\Controllers;
 
 use App\Models\Investigation;
 use App\Models\Source;
+use App\Osint\FindingDispatcher;
 use App\Osint\RunnerRegistry;
 use Illuminate\Http\RedirectResponse;
 use Illuminate\Http\Request;
@@ -72,4 +73,18 @@ class InvestigationController extends Controller
 
         return redirect()->route('investigations.index');
     }
+
+    public function runAll(Request $request, Investigation $investigation, FindingDispatcher $dispatcher): RedirectResponse
+    {
+        $this->authorize('update', $investigation);
+
+        $queued = $investigation->targets->sum(
+            fn ($target) => $dispatcher->dispatchAllApplicable($target, $request->user())
+        );
+
+        return redirect()->route('investigations.show', $investigation)
+            ->with('status', $queued > 0
+                ? "Queued {$queued} lookup(s) across all targets..."
+                : 'Nothing to queue — already up to date.');
+    }
 }