feat(cli): add `last` special keyword to report query in `secator r show`

[ocervell]

secator r show last
should pull the latest runner results

secator r show workflows/last
should pull the latest workflow results

secator r show scans/last
should pull the latest scan results

secator r show tasks/last
should pull the latest task results

[ocervell]

@claude please work on this

[claude]

Claude finished @ocervell's task in 11m 32s —— View job • claude/issue-1111-20260602-1414 • Create PR ➔

---

Implementation complete

• Gather context and understand the request
• Explore the secator r show command implementation
• Understand how report queries work
• Implement resolve_last_report_path() in secator/query/utils.py
• Update report_show() in secator/cli.py
• Add unit tests for resolve_last_report_path in tests/unit/test_query_utils.py
• Add e2e tests in tests/unit/test_report_show_e2e.py
• Commit and push changes

What was implemented

Added a resolve_last_report_path() function in secator/query/utils.py that resolves the last keyword by scanning the local reports filesystem before the query is built.

Supported forms:

Command	Behavior
secator r show last	Finds the most recently modified report.json across all runner types (tasks/workflows/scans)
secator r show tasks/last	Resolves to the task folder with the highest numeric ID
secator r show workflows/last	Resolves to the workflow folder with the highest numeric ID
secator r show scans/last	Resolves to the scan folder with the highest numeric ID

Files changed:

• secator/query/utils.py — added resolve_last_report_path() with module-level CONFIG import
• secator/cli.py — call resolve_last_report_path() before parsing the runner filter
• tests/unit/test_query_utils.py — 8 unit tests for the new function
• tests/unit/test_report_show_e2e.py — 5 e2e CLI tests covering all last variants

|