fix(app-server): clarify loopback unauthenticated warning

[694410194]

Summary

• change the unauthenticated app-server warning so loopback binds report local-only exposure instead of network-wide exposure
• keep the broader network warning for non-loopback bind addresses
• add focused unit coverage for loopback vs non-loopback warning text

Related to PlatformNetwork/bounty-challenge#49784.

Verification

• git diff --check
• static review of the bind-address warning logic

Note: I could not run cargo test / cargo check in this environment because the Rust toolchain is not installed in PATH.

[greptile-apps]

Your free trial has ended. If you'd like to continue receiving code reviews, you can add a payment method here.