test: add permissive-cors-credentials fixture (CWE-942)

[ezequiellich44-cmd]

Adds a Python test case for CWE-942 (overly permissive cross-origin policy) covering wildcard/reflected origins paired with allow-credentials, with an allow-listed safe counterpart. Catalog regenerated; corpus safety checks pass.

[ezequiellich44-cmd]

All checks green (5/5). Ready for merge. Same verified pattern as #182 which just merged. Remaining in queue after this one: #191, #190, #188, #187, #186

[ezequiellich44-cmd]

All checks green (5/5). Ready for merge. Same verified pattern as #182 which just merged. Remaining in queue after this one: #193, #191, #190, #188, #187, #186

[ezequiellich44-cmd]

All checks green (5/5). Ready for merge. Same verified pattern as #182 which just merged. Queue: #183, #184, #186, #187, #188, #190, #191, #192, #193, #195

[ezequiellich44-cmd]

All checks green (5/5). Ready for merge. Same verified pattern as #182 which just merged. Remaining in queue after this one: #196, #195, #193, #192, #191, #190, #188, #187

[ezequiellich44-cmd]

All checks green (5/5). Ready for merge. Same verified pattern as #182 which just merged. Remaining in queue after this one: #196, #195, #193, #192, #191, #190, #188, #187

[ezequiellich44-cmd]

All checks green (5/5). Ready for merge. Same verified pattern as #182 which just merged. Remaining in queue after this one: #196, #195, #193, #192, #191, #190, #188, #187

[ezequiellich44-cmd]

All checks green (5/5). Ready for merge. Same verified pattern as #182 which just merged. Queue: #183, #184, #186, #187, #188, #190, #191, #192, #193, #195

[ezequiellich44-cmd]

All checks green (5/5). Ready for merge. Same verified pattern as #182 which just merged. Queue: #183, #184, #186, #187, #188, #190, #191, #192, #193, #195

[ezequiellich44-cmd]

All checks green (5/5). Ready for merge. Same verified pattern as #182 which just merged. Queue: #183, #184, #186, #187, #188, #190, #191, #192, #193, #195

[ezequiellich44-cmd]

Rebased onto current master and the catalog was regenerated. Conflicts resolved; PR is mergeable again.

[ezequiellich44-cmd]

Rebased again onto current master (now includes the new \corpus safety rules\ CI). Catalog regenerated; both \corpus safety rules\ and \ hreatcrush security scan\ pass. PR is mergeable.