tweak(web/ip-leaks): show only 1 IP inline, rest via + N more

Five was still too loud on AttackerDetail when rotation is in play.
One inline is enough to read at a glance; everything else goes
behind the expand button. Rotation tag keeps carrying the count so
no signal is lost.

decnet_web/src/components/AttackerDetail.tsx

@@ -837,7 +837,7 @@ const Section: React.FC<{
 // ─── Leaked-IPs row (truncated view + rotation-detection badge) ────────────
 
 const ROTATION_THRESHOLD = 20;
-const INLINE_LIMIT = 5;
+const INLINE_LIMIT = 1;
 
 interface LeakedIPsRowProps {
   leaks: NonNullable<AttackerData['ip_leaks']>;