Support OCI seccomp profiles inside gVisor sandboxes #2277

This issue was generated as part of an AI review of pre-GA debug and diagnostic surfaces.

Problem Description

In internal/ateinterceptors/ateinterceptors.go:63-68, the ServerUnaryInterceptor used by ateapi formats unhandled Go errors directly into the client-facing gRPC status error:

if err != nil {
    if st, ok := apierror.FromError(err); ok {
        return nil, st.Err()
    }
    return nil, status.Errorf(codes.Internal, "internal server error: %v", err)
}

Throughout cmd/ateapi/internal/controlapi and cmd/ateapi/internal/workerservice, database errors are returned as standard wrapped errors (e.g. fmt.Errorf("while getting actor from DB: %w", err) in actor.go:160, 209, 354, 562, 592; atespace.go:77; worker.go:48, 93, 152, 307).

Impact

When database errors occur (e.g. PostgreSQL syntax errors, constraint violations, connection timeouts, column mismatches from pgx), the full internal error string and SQL context are transmitted directly to external callers. Attackers can use crafted input to probe database schema, table names, constraint definitions, and internal network addresses.

Proposed Remediation

In internal/ateinterceptors/ateinterceptors.go, sanitize unexpected errors before returning them to external clients:

1. Log the full error %v and stack trace server-side with the active trace/span ID.
2. Return a generic, opaque error to the client:

   return nil, status.Errorf(codes.Internal, "internal server error (trace_id: %s)", traceID)