Live cases

Webhook and /cases/run traffic. Survives a restart. Groq may rewrite the reason on these rows. The tool still came from the playbook.