#### Initial Release — TLCTC v1.0.0

##### New Pack: TLCTC

- Operationalises the TLCTC v2.1 taxonomy inside Cortex XSOAR 8.x and Cortex XSIAM.
- 10 cluster-scoped master playbooks (`TLCTC-01-AbuseOfFunctions` through `TLCTC-10-SupplyChain`) plus a dispatch playbook routing by `tlctccluster`.
- Two sub-playbooks: Velocity-Class router (VC-1..VC-4 branches) and RS Container (Direct Response + Propagated PR for GDPR Art. 33 / NIS2 Art. 23).
- ATT&CK -> TLCTC classifier and mapper; seed lookup list with R-EXEC / R-CRED / R-ROLE / R-SUPPLY split hints.
- `TLCTCClassify` preProcessingScript derives cluster, operational ID, velocity class, and FEC-executed flag from inbound ATT&CK technique IDs.
- `TLCTCEmitLayer3` closure script emits a Layer 3 attack-path JSON instance that validates against `json-schemas/layer-3/tlctc-attack-path.schema.json`.
- 10 custom incident fields (cluster, operational ID, delta-t, velocity class, boundary, DRE, FEC executed, attack path, ATT&CK techniques, analyst confidence).
- LayoutsContainer with two tabs: TLCTC Classification and Attack Path (Layer 3).
