[AlyaGomaa]

Sub-PR of #2141: part 3 of 12. The parent PR stays open and unchanged; this PR carries one feature of it so it can be reviewed on its own.

What this PR adds

• HostProfileStore (host_profiles.py): permanent host profiles keyed by device identity and network; names, notes and network names survive restarts and network changes.
• host_profile module profiles hosts in a worker, not in the flow path.
• Device names come from real mDNS record owners (mdns-identity.zeek); cached metadata no longer counts as a device visit.
• A routed public endpoint is not saved as the owner of a MAC; group and invalid addresses are rejected.
• ip_info: bounded enrichment that stops cleanly on shutdown.
• Apple service ports completed and malformed port mappings repaired.

Where it sits in the split

• Chain: part 3 of 12. Review and merge in order.
• Base: sebas/feat/bounded_history_retention (Bound flow storage and keep detection history #2199), so the diff shows only this PR's changes. GitHub retargets it to develop when Bound flow storage and keep detection history #2199 merges.
• Next: Add commands to stop, restart and view Slips instances #2201.
• Size: 22 files, +4346 / -60 lines (tests are +2154 of them).
• Built from parent head 8d6533186.

Tests

• Unit suite on this branch (local, pytest tests/unit -n 3): 3689 passed, 2 skipped, 0 failed. Integration tests were not run locally.

Related issues

• The hosts tab is not working #2167