feat(e2e): add distributed E2E test framework with parametric traffic generation

Add run-e2e-test.sh with CLI parameters (--hits, --http-ratio, --dns, --tls,
--src-ips, --keep-analysis, --up) for configurable traffic generation. Traffic
runs from VM endpoints with multiple source IPs (alias IPs on eth0) to produce
distinct sessions for the ML pipeline. Fix curl TLS flags (--tlsv1.2 instead
of --tls-v1-2), skip redundant local verification in distributed mode, and
fix dashboard is_available() cache that never retried after ClickHouse recovery.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

services/bot-detector/bot_detector/config.py

@@ -72,6 +72,11 @@ HEALTH_PORT = int(os.getenv('HEALTH_PORT', '8080'))
 DEDUP_TTL_MIN = int(os.getenv('DEDUP_TTL_MIN', '60'))
 RECURRENCE_WEIGHT = _require_float('RECURRENCE_WEIGHT', 0.005)
 
+# ─── Baseline minimum — nombre minimum de sessions humaines pour l'IF ─────
+MIN_HUMAN_BASELINE = int(os.getenv('MIN_HUMAN_BASELINE', '500'))
+# En mode test, les IPs privées n'ont pas d'ASN 'isp' — utiliser 'unknown' comme fallback
+BASELINE_ACCEPT_UNKNOWN = os.getenv('BASELINE_ACCEPT_UNKNOWN', 'false').lower() == 'true'
+
 # ─── Autoencoder (AE) — second scorer parallèle ────────────────────────────
 
 AE_WEIGHT = _require_float('AE_WEIGHT', 0.30, 0, 1)
@@ -79,6 +84,9 @@ AE_EPOCHS = int(os.getenv('AE_EPOCHS', '50'))
 AE_LATENT_DIM = int(os.getenv('AE_LATENT_DIM', '16'))
 AE_LEARNING_RATE = float(os.getenv('AE_LEARNING_RATE', '1e-3'))
 
+# ─── NFEnsemble — Deep Ensemble (M=5) incertitude ──────────────────────────
+NF_UNCERTAINTY_THRESHOLD = float(os.getenv('NF_UNCERTAINTY_THRESHOLD', '1.0'))
+
 SESSION_TRANSFORMER_PATH = os.getenv(
     'SESSION_TRANSFORMER_PATH',
     os.path.join(MODEL_DIR, 'session_transformer.pt')