Security:
- Remove /api/crypto/decrypt from public routes. The endpoint allowed
anyone to decrypt ciphertext without authentication. Internal callers
(exchange/model handlers) use the service directly and are behind auth.
Reliability:
- Add safe.Go / safe.GoNamed panic recovery wrapper (safe/go.go).
Previously 31 goroutines had zero recover() calls — a single panic
in any trader goroutine would crash the entire process.
- Apply safe.GoNamed to all trader launch paths:
- StartAll, RestoreRunning, LoadSingleTrader auto-start
- API handler start/restart endpoints
- Panics are now logged with full stack traces instead of crashing.
- Add strict data truthfulness rules to system prompt (CN + EN)
- Positions MUST come from get_positions tool only
- Balance MUST come from get_balance tool only
- Looking up a stock price != user owns it
- Fix unused variable warnings in hyperliquid trader
