Validate HTTP Content-Length strictly

[Mirza-Samad-Ahmed-Baig]

Summary

• reject empty, non-numeric, overflowed, or trailing-junk Content-Length header values
• keep missing Content-Length as zero for bodyless requests
• add focused server unit coverage for accepted and rejected header forms