Fix live-attack-monitor, bot-analyzer compression, and user-manager temp dir

- live-attack-monitor.sh: Remove snapshot loading, fix Apache log monitoring, add IP file sync
- bot-analyzer.sh: Implement gzip compression for large temp files (10-20x space savings)
- run.sh: Add HISTFILE fallback to prevent crashes when sourced
- user-manager.sh: Initialize TEMP_SESSION_DIR to fix user indexing errors

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

lib/user-manager.sh

@@ -12,6 +12,12 @@ if [ -z "$TOOLKIT_BASE_DIR" ]; then
     source "$SCRIPT_DIR/system-detect.sh"
 fi
 
+# Initialize temp session directory if not set
+if [ -z "$TEMP_SESSION_DIR" ]; then
+    TEMP_SESSION_DIR="/tmp/server-toolkit-$$"
+    mkdir -p "$TEMP_SESSION_DIR" 2>/dev/null
+fi
+
 #############################################################################
 # USER LISTING (Control Panel Specific)
 #############################################################################