[PAPP-38452] Add opt-in sensitive response headers

[sodle-splunk]

Summary

• add a per-action expose_sensitive_response_headers option, disabled by default
• return sensitive response headers only when the option is explicitly enabled
• document the option and add regression coverage

Validation

• python3 -m unittest discover -s tests -v
• ruff check http_connector.py tests/test_response_headers.py
• ruff format --check http_connector.py tests/test_response_headers.py
• jq empty http.json

Fixes PAPP-38452

[github-actions]

Merging this PR will release 4.0.2 with the following release notes:

4.0.2 (2026-09-16)

Bug Fixes

• add opt-in sensitive response headers (59413cd)

Connector release changes

• Added an action-level opt-in to include Authorization, Cookie, Proxy-Authenticate, Set-Cookie, and Set-Cookie2 response headers in action results. The option is disabled by default; when enabled, the values persist with the container and remain available to users with container-view access.

[splunk-soar-semantic-release]

🎉 This PR is included in version 4.0.2 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀