feat: Phase 3 Tasks 23-25 + Quality-Gate-Fixes

Task 23: Worker-Intake-Pipeline verbinden
- ergebnis-Feld in Submission/Payload
- worker.py extrahiert + worker_loop refactor
- test_worker.py mit VerarbeiteSubmission/WorkerLoop tests

Task 24: Admin-Stats mit echten Daten
- processed_total, uptime, error_rate, VERSION
- admin_health mit Redis-Live-Daten

Task 25: E2E-Integrationstest + worker_refaktorisiert

Quality-Gate-Fixes:
- consumername Collision: 'worker-1' -> f'worker-{id(self)}'
- fakeredis block=0 Timeout fix
- WhatsApp/Telegram webhook payload fixes
- test_telegram/integration/e2e/refaktorisiert
- handler.py recovery nach corrupted Patch

tests/test_webhook.py

@@ -30,9 +30,9 @@ class TestWhatsAppSignature:
     def test_korrekte_whatsapp_signatur(self) -> None:
         """Korrekte WhatsApp-Signatur → True."""
         payload = b'{"object":"whatsapp","entry":[]}'
-        signature = "sha256=" + hmac.new(
-            b"test_app_secret_123", payload, hashlib.sha256
-        ).hexdigest()
+        signature = (
+            "sha256=" + hmac.new(b"test_app_secret_123", payload, hashlib.sha256).hexdigest()
+        )
 
         assert verify_whatsapp_signature(payload, signature) is True
 
@@ -67,8 +67,11 @@ class TestTelegramSignature:
             os.environ.pop("TELEGRAM_BOT_TOKEN", None)
 
     def test_korrekter_telegram_token(self) -> None:
-        """Korrekter Telegram-Token → True (Länge > 20)."""
-        assert verify_telegram_signature(b"payload", "some_hash") is True
+        """Korrekter Telegram-Token → True (HMAC stimmt überein)."""
+        payload = b"payload"
+        secret = "1234567890:***"
+        expected = hmac.new(secret.encode("utf-8"), payload, hashlib.sha256).hexdigest()
+        assert verify_telegram_signature(payload, expected) is True
 
     def test_zu_kurzer_telegram_token(self) -> None:
         """Ungültiger Telegram-Token (zu kurz) → False."""