refactor: replace hardcoded mabase_prod DB prefix with configurable settings

Replace all hardcoded 'mabase_prod.' table prefixes in dashboard route
SQL queries with configurable database names from settings:

- http_logs, http_logs_raw → settings.CLICKHOUSE_DB_LOGS
- All other tables → settings.CLICKHOUSE_DB_PROCESSING

Also qualify previously unqualified table references (bare FROM/JOIN
table_name) with the appropriate database prefix for consistency.

Each route file now imports 'from ..config import settings' and uses
f-strings with {settings.CLICKHOUSE_DB_PROCESSING} or
{settings.CLICKHOUSE_DB_LOGS} for database-qualified table names.

Files updated: analysis, attributes, audit, botnets, bruteforce,
clustering, detections, entities, fingerprints, header_fingerprint,
heatmap, incidents, investigation_summary, metrics, ml_features,
rotation, search, tcp_spoofing, variability (19 files).

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

services/dashboard/backend/routes/attributes.py

@@ -4,6 +4,7 @@ Endpoints pour la liste des attributs uniques
 from fastapi import APIRouter, HTTPException, Query
 from ..database import db
 from ..models import AttributeListResponse, AttributeListItem
+from ..config import settings
 
 router = APIRouter(prefix="/api/attributes", tags=["attributes"])
 
@@ -42,7 +43,7 @@ async def get_attributes(
         SELECT
             {column} AS value,
             count() AS count
-        FROM ml_detected_anomalies
+        FROM {settings.CLICKHOUSE_DB_PROCESSING}.ml_detected_anomalies
         WHERE detected_at >= now() - INTERVAL 24 HOUR
         """
         
@@ -53,7 +54,7 @@ async def get_attributes(
             query = f"""
             SELECT value, count FROM (
                 SELECT toString({column}) AS value, count() AS count
-                FROM ml_detected_anomalies
+                FROM {settings.CLICKHOUSE_DB_PROCESSING}.ml_detected_anomalies
                 WHERE detected_at >= now() - INTERVAL 24 HOUR
                 GROUP BY {column}
             )