Rename to stealergram, add pyproject.toml, purge em-dashes

- Rename project to stealergram throughout
- Add pyproject.toml (replaces requirements.txt split, folds pytest.ini)
- Replace all em-dashes with hyphens across all source files

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

utils/scorer.py

@@ -1,24 +1,24 @@
 """
-scorer.py — Severity scoring for credential hits.
+scorer.py - Severity scoring for credential hits.
 
 Scoring logic (highest match wins):
 
-  CRITICAL  — Employee credentials (internal email domain)
+  CRITICAL - Employee credentials (internal email domain)
                 e.g. jdoe@yourclinic.cl:password
-              — Admin/privileged service URLs
+ - Admin/privileged service URLs
                 e.g. admin., vpn., ssh., rdp., gitlab., jira.
 
-  HIGH      — Internal-facing services
+  HIGH - Internal-facing services
                 e.g. intranet., erp., crm., portal., citrix.
-              — Password manager or SSO hits
-              — Any credential where username looks like an employee email
+ - Password manager or SSO hits
+ - Any credential where username looks like an employee email
 
-  MEDIUM    — Client-facing portals
+  MEDIUM - Client-facing portals
                 e.g. app., patient., client., booking.
-              — Domain match on a non-privileged service
+ - Domain match on a non-privileged service
 
-  LOW       — Generic domain keyword match
-              — No URL parsed, just a raw domain mention
+  LOW - Generic domain keyword match
+ - No URL parsed, just a raw domain mention
 
 Each scored hit gets a dict with:
   - severity:    CRITICAL / HIGH / MEDIUM / LOW