- Add bounded per-secret JA4 distributions alongside the global ClientHello
counter. Each worker keeps the top four HMAC-matched fingerprints per secret
and exposes them assecret_<label>_ja4_seen<TAB><hash><TAB><N>in/stats
andteleproxy_secret_ja4_seen{secret="...",hash="..."}in/metrics.
Unmatched ClientHellos remain visible in the existing global top-32 counter.