feat(13-03): wire 4 Phase 13 sources into RegisterAll (32 total)

- Register DockerHub, Kubernetes, Terraform, Helm as credentialless sources
- Update RegisterAll tests and integration test to expect 32 sources

pkg/recon/sources/register.go

@@ -56,8 +56,8 @@ type SourcesConfig struct {
 }
 
 // RegisterAll registers every Phase 10 code-hosting, Phase 11 search engine /
-// paste site, and Phase 12 IoT scanner / cloud storage source on engine
-// (28 sources total).
+// paste site, Phase 12 IoT scanner / cloud storage, and Phase 13 container /
+// IaC source on engine (32 sources total).
 //
 // All sources are registered unconditionally so that cmd/recon.go can surface
 // the full catalog via `keyhunter recon list` regardless of which credentials
@@ -212,4 +212,22 @@ func RegisterAll(engine *recon.Engine, cfg SourcesConfig) {
 		Registry: reg,
 		Limiters: lim,
 	})
+
+	// Phase 13: Container and IaC sources (credentialless).
+	engine.Register(&DockerHubSource{
+		Registry: reg,
+		Limiters: lim,
+	})
+	engine.Register(&KubernetesSource{
+		Registry: reg,
+		Limiters: lim,
+	})
+	engine.Register(&TerraformSource{
+		Registry: reg,
+		Limiters: lim,
+	})
+	engine.Register(&HelmSource{
+		Registry: reg,
+		Limiters: lim,
+	})
 }