feat(zone): add Cloudflare-style traffic overview charts

Expose Zone stats API with multi-host access-log aggregates and time
series, and render unique visitors, requests and data served on the
Zone overview with 24h/7d/30d range controls.

internal/model/openflare_access_log.go

@@ -309,8 +309,10 @@ func openFlareAccessLogQueryFromBucket(query OpenFlareAccessLogBucketQuery) Open
 		NodeID:     query.NodeID,
 		RemoteAddr: query.RemoteAddr,
 		Host:       query.Host,
+		Hosts:      query.Hosts,
 		Path:       query.Path,
 		Since:      query.Since,
+		Until:      query.Until,
 		Page:       query.Page,
 		PageSize:   query.PageSize,
 		SortBy:     query.SortBy,

internal/model/openflare_access_log_store.go

@@ -263,6 +263,7 @@ func toNodeAccessLogFilter(query OpenFlareAccessLogQuery) analyticsrepo.NodeAcce
 		NodeID:     query.NodeID,
 		RemoteAddr: query.RemoteAddr,
 		Host:       query.Host,
+		Hosts:      query.Hosts,
 		Path:       query.Path,
 		Since:      query.Since,
 		Until:      query.Until,

internal/model/openflare_access_log_store_memory.go

@@ -450,7 +450,19 @@ func memoryAccessLogMatches(row *OpenFlareAccessLog, query OpenFlareAccessLogQue
 	if trimmed := strings.TrimSpace(query.RemoteAddr); trimmed != "" && !strings.HasPrefix(strings.TrimSpace(row.RemoteAddr), trimmed) {
 		return false
 	}
-	if trimmed := strings.TrimSpace(query.Host); trimmed != "" && !strings.HasPrefix(strings.TrimSpace(row.Host), trimmed) {
+	if len(query.Hosts) > 0 {
+		rowHost := strings.ToLower(strings.TrimSpace(row.Host))
+		matched := false
+		for _, host := range query.Hosts {
+			if strings.ToLower(strings.TrimSpace(host)) == rowHost {
+				matched = true
+				break
+			}
+		}
+		if !matched {
+			return false
+		}
+	} else if trimmed := strings.TrimSpace(query.Host); trimmed != "" && !strings.HasPrefix(strings.TrimSpace(row.Host), trimmed) {
 		return false
 	}
 	if trimmed := strings.TrimSpace(query.Path); trimmed != "" && !strings.HasPrefix(strings.TrimSpace(row.Path), trimmed) {

internal/model/openflare_observability.go

@@ -185,13 +185,15 @@ type OpenFlareAccessLogQuery struct {
 	NodeID     string
 	RemoteAddr string
 	Host       string
-	Path       string
-	Since      time.Time
-	Until      time.Time
-	Page       int
-	PageSize   int
-	SortBy     string
-	SortOrder  string
+	// Hosts exact-matches any host (case-insensitive). Prefer over Host for multi-domain scopes.
+	Hosts     []string
+	Path      string
+	Since     time.Time
+	Until     time.Time
+	Page      int
+	PageSize  int
+	SortBy    string
+	SortOrder string
 }
 
 // OpenFlareAccessLogBucketQuery filters folded access log queries (v1 stub).
@@ -199,8 +201,10 @@ type OpenFlareAccessLogBucketQuery struct {
 	NodeID      string
 	RemoteAddr  string
 	Host        string
+	Hosts       []string
 	Path        string
 	Since       time.Time
+	Until       time.Time
 	Page        int
 	PageSize    int
 	SortBy      string