security: reconstruct exact HTTP method strings on current main

[seonghobae]

Controlled current-main replacement for conflicted Draft #184 after #178 reached protected main.

This first commit is intentionally RED: it adds only the exact-string regression tests for issue #124 on protected base 3c54c5fd013cc43e68d4fe0409a498df88a69ec2. No predecessor check/review evidence transfers. The production fix will be applied only after the failing boundary is observed on this exact head.

Do not merge while Draft or while required/security evidence is non-passing. Central dependency-review and Strix availability remain independent gates.

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: ba2a0138-1c30-4686-b691-2b38652555c0

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}