security: restrict telegram bot to authorized CHAT_ID only