fix: ADR-080 P0 security + CI remediation from QE analysis

Address all 5 P0 issues from QE analysis (55/100 score):

- P0-1: Rate limiter bypass — validate X-Forwarded-For against trusted proxy list
- P0-2: Exception detail leak — generic 500 messages, exception_type gated by dev mode
- P0-3: WebSocket JWT in URL (CWE-598) — first-message auth pattern replaces query param
- P0-4: Rust tests not in CI — add rust-tests job gating docker-build and notify
- P0-5: WebSocket path mismatch — use WS_PATH constant instead of hardcoded /ws/sensing

Includes ADR-080 remediation plan and 9 QE reports (4,914 lines).
Firmware validated on ESP32-S3 (COM8): CSI collecting, calibration OK.

Co-Authored-By: claude-flow <ruv@ruv.net>

v1/src/api/routers/pose.py

@@ -137,7 +137,7 @@ async def get_current_pose_estimation(
         logger.error(f"Error in pose estimation: {e}")
         raise HTTPException(
             status_code=500,
-            detail=f"Pose estimation failed: {str(e)}"
+            detail="An internal error occurred. Please try again later."
         )
 
 
@@ -174,7 +174,7 @@ async def analyze_pose_data(
         logger.error(f"Error in pose analysis: {e}")
         raise HTTPException(
             status_code=500,
-            detail=f"Pose analysis failed: {str(e)}"
+            detail="An internal error occurred. Please try again later."
         )
 
 
@@ -208,7 +208,7 @@ async def get_zone_occupancy(
         logger.error(f"Error getting zone occupancy: {e}")
         raise HTTPException(
             status_code=500,
-            detail=f"Failed to get zone occupancy: {str(e)}"
+            detail="An internal error occurred. Please try again later."
         )
 
 
@@ -232,7 +232,7 @@ async def get_zones_summary(
         logger.error(f"Error getting zones summary: {e}")
         raise HTTPException(
             status_code=500,
-            detail=f"Failed to get zones summary: {str(e)}"
+            detail="An internal error occurred. Please try again later."
         )
 
 
@@ -285,7 +285,7 @@ async def get_historical_data(
         logger.error(f"Error getting historical data: {e}")
         raise HTTPException(
             status_code=500,
-            detail=f"Failed to get historical data: {str(e)}"
+            detail="An internal error occurred. Please try again later."
         )
 
 
@@ -313,7 +313,7 @@ async def get_detected_activities(
         logger.error(f"Error getting activities: {e}")
         raise HTTPException(
             status_code=500,
-            detail=f"Failed to get activities: {str(e)}"
+            detail="An internal error occurred. Please try again later."
         )
 
 
@@ -357,7 +357,7 @@ async def calibrate_pose_system(
         logger.error(f"Error starting calibration: {e}")
         raise HTTPException(
             status_code=500,
-            detail=f"Failed to start calibration: {str(e)}"
+            detail="An internal error occurred. Please try again later."
         )
 
 
@@ -383,7 +383,7 @@ async def get_calibration_status(
         logger.error(f"Error getting calibration status: {e}")
         raise HTTPException(
             status_code=500,
-            detail=f"Failed to get calibration status: {str(e)}"
+            detail="An internal error occurred. Please try again later."
         )
 
 
@@ -416,5 +416,5 @@ async def get_pose_statistics(
         logger.error(f"Error getting statistics: {e}")
         raise HTTPException(
             status_code=500,
-            detail=f"Failed to get statistics: {str(e)}"
+            detail="An internal error occurred. Please try again later."
         )