test: add origin-validation-bypass fixture (CWE-346)

[ezequiellich44-cmd]

Adds a Python test case for CWE-346 (origin validation error) reflecting Origin without allow-list vs allow-listed safe counterpart. Catalog regenerated; corpus safety checks pass.

[ezequiellich44-cmd]

All checks green (5/5). Ready for merge. Same verified pattern as #182 which just merged. Remaining in queue after this one: #196, #195, #193

[ezequiellich44-cmd]

All checks green (5/5). Ready for merge. Same verified pattern as #182 which just merged. Queue: #183, #184, #185, #186, #187, #188, #190, #191, #193, #195

[ezequiellich44-cmd]

All checks green (5/5). Ready for merge. Same verified pattern as #182 which just merged. Remaining in queue after this one: #196, #195, #193

[ezequiellich44-cmd]

All checks green (5/5). Ready for merge. Same verified pattern as #182 which just merged. Remaining in queue after this one: #196, #195, #193

[ezequiellich44-cmd]

All checks green (5/5). Ready for merge. Same verified pattern as #182 which just merged. Remaining in queue after this one: #196, #195, #193

[ezequiellich44-cmd]

All checks green (5/5). Ready for merge. Same verified pattern as #182 which just merged. Queue: #183, #184, #185, #186, #187, #188, #190, #191, #193, #195

[ezequiellich44-cmd]

All checks green (5/5). Ready for merge. Same verified pattern as #182 which just merged. Queue: #183, #184, #185, #186, #187, #188, #190, #191, #193, #195

[ezequiellich44-cmd]

Rebased onto current master and the catalog was regenerated. Conflicts resolved; PR is mergeable again.

[ezequiellich44-cmd]

Rebased again onto current master (now includes the new \corpus safety rules\ CI). Catalog regenerated; both \corpus safety rules\ and \ hreatcrush security scan\ pass. PR is mergeable.