fix(health): bind health server to localhost only for security

Change health check server from binding to all interfaces (:8080) to localhost only (127.0.0.1:8080).

This prevents external access to sensitive endpoints (/stats, /clients, /banned-ips)

Author: Rxflex

health/server.go

@@ -79,8 +79,8 @@ func StartHealthCheck(configMgr *config.ConfigManager) {
 	http.HandleFunc("/banned-ips", server.handleBannedIPs)
 	http.HandleFunc("/clients", server.handleClients)
 
-	log.Println("[Health] Starting health check server on :8080")
-	if err := http.ListenAndServe(":8080", nil); err != nil {
+	log.Println("[Health] Starting health check server on 127.0.0.1:8080")
+	if err := http.ListenAndServe("127.0.0.1:8080", nil); err != nil {
 		log.Printf("[Health] Failed to start server: %v", err)
 	}
 }