fix: make CLI robust to missing coordinator dependencies

- Replace hardcoded absolute paths with project-relative resolution
- Add AITBC_SERVICES_PATH environment variable override
- Wrap service imports in try/except with graceful degradation
- Add aiohttp to CLI requirements
- Create missing README.md for aitbc-agent-sdk to fix poetry build
- Make run_all_tests.sh portable with PROJECT_ROOT calculation
- Fix enterprise_integration.py path handling

CLI now loads successfully even when coordinator-api services
are not installed. Advanced commands fail with helpful hints
instead of crashing the entire CLI.

cli/aitbc_cli/commands/surveillance.py

@@ -10,13 +10,49 @@ import json
 from typing import Optional, List, Dict, Any
 from datetime import datetime, timedelta
 
-# Import surveillance system
+# Import surveillance system with robust path resolution
+import os
 import sys
-sys.path.append('/home/oib/windsurf/aitbc/apps/coordinator-api/src/app/services')
-from trading_surveillance import (
-    start_surveillance, stop_surveillance, get_alerts, 
-    get_surveillance_summary, AlertLevel
-)
+
+# Determine services path: use AITBC_SERVICES_PATH if set, else compute relative to repo layout
+_services_path = os.environ.get('AITBC_SERVICES_PATH')
+if _services_path:
+    if os.path.isdir(_services_path):
+        if _services_path not in sys.path:
+            sys.path.insert(0, _services_path)
+    else:
+        print(f"Warning: AITBC_SERVICES_PATH set but not a directory: {_services_path}", file=sys.stderr)
+else:
+    # Compute project root relative to this file: cli/aitbc_cli/commands -> 3 levels up to project root
+    _project_root = os.path.abspath(os.path.join(os.path.dirname(__file__), '..', '..', '..'))
+    _computed_services = os.path.join(_project_root, 'apps', 'coordinator-api', 'src', 'app', 'services')
+    if os.path.isdir(_computed_services) and _computed_services not in sys.path:
+        sys.path.insert(0, _computed_services)
+    else:
+        # Fallback to known hardcoded path if it exists (for legacy deployments)
+        _fallback = '/home/oib/windsurf/aitbc/apps/coordinator-api/src/app/services'
+        if os.path.isdir(_fallback) and _fallback not in sys.path:
+            sys.path.insert(0, _fallback)
+
+try:
+    from trading_surveillance import (
+        start_surveillance, stop_surveillance, get_alerts, 
+        get_surveillance_summary, AlertLevel
+    )
+    _import_error = None
+except ImportError as e:
+    _import_error = e
+
+    def _missing(*args, **kwargs):
+        raise ImportError(
+            f"Required service module 'trading_surveillance' could not be imported: {_import_error}. "
+            "Ensure coordinator-api dependencies are installed or set AITBC_SERVICES_PATH."
+        )
+    start_surveillance = stop_surveillance = get_alerts = get_surveillance_summary = _missing
+
+    class AlertLevel:
+        """Stub for AlertLevel when import fails."""
+        pass
 
 @click.group()
 def surveillance():