fix: fix inconsistent naming pattern

[JisoLya]

Currently, the configuration keys in rest-server.properties use snake_case (e.g., server_port), which is inconsistent with the naming convention expected by ServerOptions.java. This mismatch causes the following issues:

• User-defined configurations are ignored at startup.
• The server defaults to hardcoded values in ServerOptions.java.

Terminal logs show warnings such as: "arthas.xxxx is redundant ...", indicating that the properties are not being recognized or registered.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 31.96%. Comparing base (03e6b8e) to head (4f3bfab).

Additional details and impacted files

@@             Coverage Diff              @@
##             master    #2945      +/-   ##
============================================
- Coverage     36.80%   31.96%   -4.85%     
- Complexity      338      500     +162     
============================================
  Files           805      816      +11     
  Lines         68587    69738    +1151     
  Branches       9029     9226     +197     
============================================
- Hits          25241    22289    -2952     
- Misses        40653    44972    +4319     
+ Partials       2693     2477     -216     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[Copilot]

Pull request overview

This PR enhances security for Arthas debugging endpoints by restricting remote access and standardizing configuration naming patterns across the codebase.

Changes:

• Added localhost-only access restriction to the store node's arthasstart endpoint
• Standardized Arthas configuration property names from snake_case to camelCase (e.g., arthas.telnet_port → arthas.telnetPort)
• Changed default Arthas IP binding from 0.0.0.0 to 127.0.0.1 and expanded disabled commands to include jad,ognl,vmtool

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 5 comments.

Show a summary per file

File	Description
hugegraph-store/hg-store-node/src/main/resources/application.yml	Added Arthas configuration with localhost-only IP binding and expanded disabled commands
hugegraph-store/hg-store-node/src/main/java/org/apache/hugegraph/store/node/controller/PartitionAPI.java	Added remote access check to arthasstart endpoint and new forbiddenMap helper method
hugegraph-store/hg-store-node/src/main/java/org/apache/hugegraph/store/node/AppConfig.java	Updated default values for Arthas IP and disabled commands
hugegraph-server/hugegraph-dist/src/assembly/static/conf/rest-server.properties	Renamed Arthas properties to camelCase and updated default values
hugegraph-server/hugegraph-api/src/main/java/org/apache/hugegraph/config/ServerOptions.java	Updated default values for Arthas IP binding and disabled commands

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 5 out of 5 changed files in this pull request and generated 4 comments.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[github-actions]

Due to the lack of activity, the current pr is marked as stale and will be closed after 180 days, any update will remove the stale label

[VGalaxies]

Review summary

• Blocking: yes
• Summary: A success path can now throw while constructing the response because nullable payloads are passed into Map.of().
• Evidence:
  • Static review of git diff origin/master...HEAD and PartitionAPI.ok(...).