fix: clean up logging colors, reduce noise, enable Tailscale access (#166)

* fix: reserve red for real errors, reduce log noise, allow Tailscale access

- Add _ColorFormatter: red = ERROR/CRITICAL only, yellow = WARNING, green = INFO
- Override uvicorn's default colors to use our scheme
- Downgrade discord "not installed" from ERROR to WARNING (optional dep)
- Downgrade DuckDuckGo unavailable from INFO to DEBUG
- Stop discord token watcher retry loop when discord.py not installed
- Add configurable trusted_hosts setting; dev mode allows all hosts
- Exclude .claude/ from uvicorn reload watcher (worktree isolation)
- Fix pre-commit hook: use tox -e unit, bump timeout to 60s

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* style: auto-format with black

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix: pre-commit hook auto-formats with black+isort before testing

Formatting should never block a commit — just fix it automatically.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Trip T <trip@local>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

src/config.py

@@ -112,6 +112,17 @@ class Settings(BaseSettings):
     # Set CORS_ORIGINS as a comma-separated list, e.g. "http://localhost:3000,https://example.com"
     cors_origins: list[str] = ["*"]
 
+    # Trusted hosts for the Host header check (TrustedHostMiddleware).
+    # Set TRUSTED_HOSTS as a comma-separated list. Wildcards supported (e.g. "*.ts.net").
+    # Defaults include localhost + Tailscale MagicDNS. Add your Tailscale IP if needed.
+    trusted_hosts: list[str] = [
+        "localhost",
+        "127.0.0.1",
+        "*.local",
+        "*.ts.net",
+        "testserver",
+    ]
+
     # Environment mode: development | production
     # In production, security settings are strictly enforced.
     timmy_env: Literal["development", "production"] = "development"