* test(e2e): make security boundary tests assert real outcomes * fix(e2e): use expect_err to satisfy clippy err_expect lint
test(security): add security boundary tests Add e2e tests for security-sensitive scenarios: - Large XML body handling (DoS protection) - Excessive multipart parts (DoS protection) - Concurrent object operations (race condition handling) - Internal URL validation (SSRF prevention) Refs #748