v3.2.6-sr94.48

Private performance metrics

• Add an opt-in, independently authenticated metrics listener, separate from the public app and short-link aliases.
• Report bounded request counters/duration histograms and worker process/event-loop gauges. Never label data with URLs, aliases, users, domains, IPs or credentials.
• Fail startup on invalid credentials, bind addresses, worker ports or listener conflicts; support protected credential files and restart-based rotation.
• Document private-network Prometheus setup, worker coverage, rotation and rollback. Off by default; no migration or existing account/link changes.

Validation

Focused and full isolated container regression passed, including token-file precedence, revocation after rotation, disabled mode, private/public listener separation, preserved /metrics aliases, bounded cardinality and cumulative histograms.

The test client now drains ordinary bodies on fresh connections (preserving streaming tests), avoiding Node's unread-response close assertion without retrying counted redirects. An offline response-schema fixture no longer relies on public DNS. Application assertions remain unchanged.

Publication is not deployment acceptance: exact-wrapper scans, recoverable backups and live checks are tracked separately in docs/COMMUNITY-FEATURE-ROADMAP.md.