fix: ADR-080 P0 security + CI remediation from QE analysis

Address all 5 P0 issues from QE analysis (55/100 score):

- P0-1: Rate limiter bypass — validate X-Forwarded-For against trusted proxy list
- P0-2: Exception detail leak — generic 500 messages, exception_type gated by dev mode
- P0-3: WebSocket JWT in URL (CWE-598) — first-message auth pattern replaces query param
- P0-4: Rust tests not in CI — add rust-tests job gating docker-build and notify
- P0-5: WebSocket path mismatch — use WS_PATH constant instead of hardcoded /ws/sensing

Includes ADR-080 remediation plan and 9 QE reports (4,914 lines).
Firmware validated on ESP32-S3 (COM8): CSI collecting, calibration OK.

Co-Authored-By: claude-flow <ruv@ruv.net>

v1/src/middleware/error_handler.py

@@ -202,11 +202,10 @@ class ErrorHandler:
             )
         
         # Determine error details
-        details = {
-            "exception_type": type(exc).__name__,
-        }
-        
+        details = {}
+
         if self.include_traceback:
+            details["exception_type"] = type(exc).__name__
             details["traceback"] = traceback.format_exception(
                 type(exc), exc, exc.__traceback__
             )