Sanitize 400 error messages in GlobalExceptionHandler and validation filters to use static strings. This change improves consistency and prevents leaking internal exception details. Updated tests to reflect new error messages for JSON parsing and bad request scenarios.

_docs/_autodev_state.md

@@ -2,24 +2,14 @@
 
 ## Current Step
 flow: existing-code
-step: 17
-name: Retrospective
-status: completed
+step: 11
+name: Run Tests
+status: in_progress
 sub_step:
-  phase: 4
-  name: lessons-updated
-  detail: "cycle 9 complete; release skipped; no re-entry (release not Released)"
+  phase: 1
+  name: functional-run
+  detail: ""
 retry_count: 0
-cycle: 9
+cycle: 10
 tracker: jira
 auto_push: true
-
-## Step 16.5
-release_verdict: skipped
-release_skip_reason: user chose B — skip release, proceed to retrospective
-
-## Cycle 9 Summary
-tasks: AZ-1074, AZ-1075
-gates: tests PASS, security PASS (delta), perf PASS (8/8 REST)
-artifacts: deploy_cycle9.md, perf_2026-06-25_cycle9.md, retro_2026-06-25_cycle9.md, security_report_cycle9.md
-uncommitted: yes — operator commit/push pending