fix: audit findings in src/telemetry

[avoidwork]

Code Audit: telemetry

Summary

Total issues: 1 (critical: 0, high: 0, medium: 1, low: 0)

One medium-severity bug found in the telemetry provider related to incorrect package import.

Findings

File	Issue Type	Severity	Summary
src/telemetry/provider.js	bug	medium	ConsoleSpanExporter imported from wrong package — should be from @opentelemetry/sdk-trace-base, not @opentelemetry/exporter-trace-otlp-http

Remediation Priority

1. [Medium severity bugs]
   • Fix import in provider.js line 4 to use @opentelemetry/sdk-trace-base instead of @opentelemetry/exporter-trace-otlp-http