feat: add OTLP production evidence core

[yaertu]

🎯 Kullanıcı sonucu

Production'da oluşan bir olayı, vendor hesabına veya canlı telemetry sorgusuna bağımlı kalmadan, OpenTelemetry Protocol File Exporter JSON/JSONL girdisinden portable FixBundle evidence ZIP'e dönüştür.

🔧 Bu dikey dilim

• fixbundle otlp CLI yolu
• OTLP resourceLogs → scopeLogs → logRecords parsing
• OTLP resourceSpans → scopeSpans → spans parsing
• OTLP AnyValue / resource attribute normalization
• exact traceId / spanId correlation
• service.name, service version ve deployment environment evidence
• exception.type, exception.message, exception.stacktrace normalization
• exact --trace-id seçimi
• inclusive --since / --until bounds
• input byte + total record guards
• selected/omitted record provenance
• redaction + AI_HANDOFF.md + SHA-256 integrity
• offline/local path, network yok, auto-upload yok

🧪 Kanıt

• tests/test_otlp.py exact-trace selection, unrelated-trace omission, log/span correlation, exception extraction, secret redaction ve checksum doğruluyor.
• malformed JSONL, invalid time range ve record overflow fail-closed testleri var.
• Var olan v0.4 live GitHub failure evidence CI gate'i aynen korunuyor.

🔒 Privacy / safety

• raw telemetry otomatik yüklenmez
• input absolute path'i manifest'e yazılmaz
• secret-shaped text serialization öncesi redaction katmanından geçer
• explicit trace selection farklı trace ID'leri sessizce birleştirmez
• malformed veya bounds dışı input sessizce atlanmaz

📦 Bundle schema etkisi

Yeni production evidence family: fixbundle/0.5.

Bu PR henüz v0.5 final release iddiası değildir. Merge gate: full cross-platform CI + mevcut live GitHub evidence gate + spec-conformant OTLP demo + README/CHANGELOG sync.

Tracks #4.

[qodo-code-review]

ⓘ Qodo reviews are paused because your trial has ended. Ask your workspace admin to add credits to resume reviews. Manage billing