feat(router): entity cache OTEL/Prometheus metrics (4/6)

[SkArchon]

Part 4 of 6 — split out from #2777. Stacked on #2945.

What's included

• router/pkg/metric/entity_cache_metrics: cache hit/miss/latency instruments recorded from the per-request cache analytics snapshot
• otel attributes for cache level/source/name/entity type (shared constants so recording sites can't drift)
• entity_caching_stats opt-in config keys for Prometheus and OTLP (yaml + env vars, schema, defaults) — opt-in per feat(router): entity caching with L1/L2, shadow mode, and analytics #2777 review fix: use empty url to use the same url as the playground #21
• graph server wiring: metric setup/shutdown and handler snapshot recording; cache analytics collection enables only when metrics are configured

The tree at this PR's tip is byte-identical to the pre-split router branch — the split is purely for reviewability.

🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: fcdfde53-dfa5-421c-a174-a4721c27db2a

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

Router-nonroot image scan failed

❌ Security vulnerabilities found in image:

ghcr.io/wundergraph/cosmo/router:sha-97fa19415db8041a6a69758bb1f2fd98161e7a70-nonroot

Please check the security vulnerabilities found in the PR.

If you believe this is a false positive, please add the vulnerability to the .trivyignore file and re-run the scan.

[codecov]

Codecov Report

❌ Patch coverage is 9.59596% with 179 lines in your changes missing coverage. Please review.
✅ Project coverage is 56.73%. Comparing base (1ee462b) to head (36deda8).

Files with missing lines	Patch %	Lines
router/pkg/metric/entity_cache_metrics.go	0.00%	153 Missing ⚠️
router/core/graph_server.go	12.00%	19 Missing and 3 partials ⚠️
router/core/graphql_handler.go	55.55%	4 Missing ⚠️

Additional details and impacted files

@@                         Coverage Diff                         @@
##           milinda/entity-caching-2-router    #2952      +/-   ##
===================================================================
- Coverage                            57.64%   56.73%   -0.92%     
===================================================================
  Files                                  245      246       +1     
  Lines                                27734    27922     +188     
===================================================================
- Hits                                 15988    15842     -146     
- Misses                               10165    10486     +321     
- Partials                              1581     1594      +13     

Files with missing lines	Coverage Δ
router/core/router.go	66.68% <100.00%> (+0.04%)	⬆️
router/pkg/config/config.go	42.96% <ø> (ø)
router/pkg/metric/config.go	67.50% <ø> (ø)
router/pkg/otel/attributes.go	62.50% <ø> (ø)
router/core/graphql_handler.go	61.08% <55.55%> (-2.34%)	⬇️
router/core/graph_server.go	78.43% <12.00%> (-1.26%)	⬇️
router/pkg/metric/entity_cache_metrics.go	0.00% <0.00%> (ø)

... and 13 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[SkArchon]

Auto-closed as merged by a force-push mishap. Replaced by #2956.