Add a focus query before you submit logs
Use the optional focus field when you already have a working theory, like auth failures, websocket disconnects, or database timeouts. Logger still runs the full normal analysis first and then layers a separate focus investigation on top.