chore: update scanner/ddos trainers, benchmarks, and tests

Expand DDoS feature vector to 14 dimensions (cookie_ratio, referer_ratio,
accept_language_ratio, suspicious_path_ratio). Add heuristic auto-labeling
to DDoS trainer. Update benchmarks and tests to match new feature vectors.

Signed-off-by: Sienna Meridian Satterwhite <sienna@sunbeam.pt>

tests/ddos_test.rs

@@ -46,13 +46,14 @@ fn make_model(
 
 fn default_ddos_config() -> DDoSConfig {
     DDoSConfig {
-        model_path: String::new(),
+        model_path: Some(String::new()),
         k: 5,
         threshold: 0.6,
         window_secs: 60,
         window_capacity: 1000,
         min_events: 10,
         enabled: true,
+        use_ensemble: false,
     }
 }