fix(security): redact database query parameters (HH-596) (#159)

Co-authored-by: Rogee <rogee@ipao.vip>

backend/internal/handler/ws/handler.go

@@ -66,7 +66,7 @@ func (h *Handler) ServeWS(c *gin.Context) {
 	// Step 1: Authenticate (JWT or pubsub_token)
 	claims, err := h.authenticator.Authenticate(c)
 	if err != nil {
-		logger.L().Errorf("ws: authentication failed: %v", err)
+		logger.L().Warnf("ws: authentication rejected: %v", err)
 		c.JSON(http.StatusUnauthorized, gin.H{"error": err.Error()})
 		return
 	}