Put the caller, site and route on every request's span and log line

CHANGELOG.md

@@ -12,6 +12,19 @@ The host's contract version is now 0.5.0, so discovery refuses a plugin whose `a
 `0.4.x`. Change the literal in each plugin's manifest when you upgrade, and add `assetHref` to any
 `RequestContext` your tests build by hand: `assetHref: (href) => href`.
 
+### Every request's span and `request` log line name the caller, the site and the route
+
+The `request` line and the request span now carry OpenTelemetry's HTTP attributes:
+`http.request.method`, `url.path`, `http.response.status_code`, `http.route` (when a route matched),
+`server.address` (the `Host`), `user_agent.original` and `client.address`. They replace `method`,
+`path` and `status`; `ms` is gone, because the span's own duration is the latency. Plugins' own log
+lines for a request carry them too.
+
+`client.address` is the socket's peer. Set `TRUSTED_PROXIES` (comma-separated IPs or CIDR ranges)
+to the proxies in front of the host and the address `X-Forwarded-For` names is used instead. A bad
+entry refuses the boot. The log now holds callers' IPs and user agents, which are personal data:
+say so in your privacy policy.
+
 ### `buildPaginationModel` builds the pagination partial's model
 
 Call `buildPaginationModel(page, hrefFor, { label?, pageSizes?, pageParam?, pageSizeParam? })` from