Protected Performance Metrics

Operator-only latency and system metrics for LR Shield. Browser access requires authenticated operator credentials and the configured `METRICS_SECRET`.