fix(server): clarify loopback auth warning

[OnlyYu1996]

Fixes PlatformNetwork/bounty-challenge#49784.

Summary

• Parse the listen address before emitting disabled-auth warnings.
• Use a local-only exposure warning for loopback binds such as 127.0.0.1 and ::1.
• Keep the existing network-wide warning for non-loopback binds such as 0.0.0.0.
• Add regression coverage for loopback and network bind warning text.

Validation

• cargo +1.90.0 fmt --package cortex-app-server --check
• git diff --check

Targeted cargo +1.90.0 test -p cortex-app-server test_auth_disabled_exposure_warning_for_loopback_and_network_binds -- --nocapture is blocked in this Windows/MSVC environment before crate tests run by the existing aws-lc-sys C build failure.

[greptile-apps]

Your free trial has ended. If you'd like to continue receiving code reviews, you can add a payment method here.