fix(sdk): close conformance gaps in the agent, directory and service

[zhoodar]

Summary

• Correct Agent, Directory, and Service behavior against the ODP draft, with expanded shared conformance and regression coverage.
• Bound Agent downloads during streaming, pin validated destinations, preserve TLS hostname checks, isolate supporting-document credentials, and add bounded read-only retries.
• Resolve advertised search capabilities and validate typed filters, sort selection, and refinements without taking over application search or storage.
• Correct representation defaults, pagination, response limits, content negotiation, conditional responses, and localized response metadata.
• Accept compatible incoming minor versions while emitting 1.0. The original odp-specs vectors and schemas are unchanged.
• Document integration responsibilities and keep root Maven properties alphabetical.

Compatibility

SearchPage includes per-entry issues. Service handlers report intentional request failures with OdpServiceException; unexpected handler exceptions produce masked internal errors. Individual retrieval defaults to full representations. Apache HttpClient 5 is an internal Agent dependency; Jackson 2 and Jackson 3 remain separate provider choices.

Applications own HTTP response caching, asynchronous wrapping, authentication/payment execution, and database-backed search semantics. Shared conformance reports retain explicit skips for unimplemented optional behavior and cases outside the SDK's execution boundaries.

Verification

• ./mvnw verify on Java 17, 21, and 25
• ./scripts/run-conformance.sh
• ./scripts/verify-consumer.sh
• ./scripts/verify-gradle-consumer.sh
• ./scripts/run-node-interoperability.sh
• Original protocol-version vectors: all seven cases executed for both Agent and Service
• git diff --check