Per the owner ruling, an omitted trusted_proxies key now defaults to the RFC 1918 private ranges rather than trusting no one. Update the wiring test to expect that default, and add a case that an explicitly empty list still trusts no one. Model: opus-4-8