[Runtime] Add bounded GraphQL query complexity and WebSocket handshake runtime probes

[githubmofo]

Background

Rules TG-GQL-* and TG-WS-* provide static detection and remediation guidance, but lack automated bounded network probes.

Planned Enhancements (Tracked for v0.7.2)

• Implement bounded GraphQL introspection queries to detect unbounded recursion depth without causing server denial-of-service.
• Implement WebSocket handshake verification to assert cookie/token validation on initial upgrade request.
• Log GraphQL and WebSocket probe payloads into requests.json and responses.json with sensitive data masking.

[githubmofo]

Resolved in v0.9.2: Enhanced rules/graphql/TG-GQL-001 with bounded 3-level canary introspection protocols and complexity limiting rules. Enhanced rules/websocket/TG-WS-001 with HTTP upgrade handshake validation probes and strict Origin header checks.