Shared fail-closed validation for outbound model HTTP headers.

Both the provider-neutral client and the built-in sync/stream transport use this boundary. Header names are RFC token bytes, authority is transport owned, names are unique case-insensitively, and aggregate storage is bounded before any socket is opened.