feat: flag insecure websocket transport in AW-005

[brandonwise]

Summary

This ships a user-visible hardening upgrade to AW-005 by expanding cleartext transport detection beyond http:// to also catch ws:// endpoints.

Why now

Recent telemetry converged on MCP transport security and deterministic guardrails:

• Reddit discussions continue to emphasize injection/guardrail bypass risk and runtime safety controls: https://www.reddit.com/r/ClaudeAI/comments/1r3np57/stop_trying_to_make_ai_guardrails_unbreakable_put/
• X security chatter around MCP remote server risk and weak transport posture remains high: https://x.com/wiz_io/status/2040874173824995513
• Product Hunt AI-agent launches are increasingly governance/reliability-focused (signal that transport safety is table stakes): https://www.producthunt.com/categories/ai-agent-automation

What changed

• AW-005 now flags insecure ws:// endpoints in both url and args fields (alongside existing http:// checks).
• Added localhost exceptions for IPv6 loopback ([::1]) to avoid noisy local false positives.
• Updated remediation text to recommend TLS endpoints (https:// / wss://).
• Added new fixture testdata/ws-no-auth.json and integration coverage for websocket detection.
• Updated README rule docs and findings snapshot wording for AW-005.
• Updated two report sort calls to sort_by_key(Reverse(...)) for Rust 1.95 clippy compatibility (no behavior change).

Deep validation

1) Full/repo-level suite

• cargo test ✅ pass (212 unit + 37 integration tests passed)

2) Targeted tests (changed modules)

• cargo test rules::transport::tests ✅ pass (8 passed)
• cargo test test_detects_insecure_websocket_transport ✅ pass (1 passed)

3) Lint/type/build checks

• cargo clippy --all-targets -- -D warnings ✅ pass
• cargo build --release ✅ pass

4) Smoke/integration check for changed behavior

• ./target/release/agentwise scan testdata/ws-no-auth.json --format json | jq -r '.findings[] | select(.rule_id=="AW-005") | .message' ✅ output:
  • Server 'realtime-api' uses unencrypted WS transport: ws://realtime.example.com/mcp
• ./target/release/agentwise scan testdata/ws-no-auth.json --fail-on high ✅ expected failing gate behavior (EXIT_CODE=1)

Docs tone check

• node /Users/bwise/.openclaw/workspace/projects/humanizer/src/cli.js score README.md --ignore-code → 🟡 43/100