fix: respect public widget privacy settings

[saurabhhhcodes]

Summary

• remove disabled widget data from the public profile API response
• preserve enabled profile data while honoring saved widget preferences
• add regression coverage for hidden streak, language, and PR fields

Closes #3175

Validation

• npx vitest run test/public-profile-data.test.ts --environment node
• npm run type-check
• npx eslint src/lib/public-profile-data.ts "src/app/api/public/[username]/route.ts" test/public-profile-data.test.ts
• git diff --check

[github-actions]

GSSoC Label Checklist 🏷️

@Priyanshu-byte-coder — please apply the appropriate labels before merging:

Difficulty (pick one):

• level:beginner — 20 pts
• level:intermediate — 35 pts
• level:advanced — 55 pts
• level:critical — 80 pts

Quality (optional):

• quality:clean — ×1.2 multiplier
• quality:exceptional — ×1.5 multiplier

Validation (required to score):

• gssoc:approved — counts for points
• gssoc:invalid / gssoc:spam / gssoc:ai-slop — does not score

Type labels (type:*) are auto-detected from files and title. Review and adjust if needed.
Points formula: (difficulty × quality_multiplier) + type_bonus

[github-actions]

🎉 Merged! Thanks for contributing to DevTrack.

If the project has been useful to you, a ⭐ star on the repo is the easiest way to support it — it helps DevTrack get discovered by more developers.

Keep an eye on open issues for your next contribution!