feat(evolution): add incident-responder agent for server incident response and forensics

kilo.jsonc

@@ -498,6 +498,26 @@
           "subagent": "deny"
         }
       }
+    },
+    "incident-responder": {
+      "description": "Server incident response and system hardening specialist. Handles live forensics, malware removal, persistence hunting, SSH-based server cleanup, and post-incident hardening. Works with any OS and panel.",
+      "mode": "subagent",
+      "model": "ollama-cloud/kimi-k2.6:cloud",
+      "color": "#B91C1C",
+      "permission": {
+        "read": "allow",
+        "edit": "allow",
+        "write": "allow",
+        "bash": "allow",
+        "glob": "allow",
+        "grep": "allow",
+        "task": {
+          "*": "deny",
+          "code-skeptic": "allow",
+          "orchestrator": "allow",
+          "subagent": "deny"
+        }
+      }
     }
   }
 }