fix: Address P2 security audit findings

- VULN-012: Split STATUS into minimal (unauthed: hostname, uptime,
  rssi, version, motion, presence) and full (authed: all internals,
  build info, target IP, heap, NVS stats)
- VULN-011: Remove mDNS service advertisement and hardcoded "ESP32 CSI
  Sensor" instance name; use hostname only
- VULN-021: Increase HMAC tag from 64 bits (16 hex) to 128 bits
  (32 hex) — BREAKING: client scripts must update HMAC computation
- VULN-023: Enable PMF (802.11w) in sdkconfig.defaults to prevent
  deauth attacks at protocol level

get-started/csi_recv_router/sdkconfig.defaults

@@ -87,3 +87,9 @@ CONFIG_FREERTOS_USE_TICKLESS_IDLE=y
 # WiFi Authentication (reject open/WEP APs)
 #
 CONFIG_EXAMPLE_WIFI_AUTH_WPA2_WPA3_PSK=y
+
+#
+# Protected Management Frames (802.11w) — prevent deauth attacks
+#
+CONFIG_ESP_WIFI_PMF_ENABLED=y
+CONFIG_ESP_WIFI_PMF_REQUIRED=y