chore: add more security-sensitive headers

[MegaManSec]

Lots of new security headers have become standard since the original list.

This PR also adds more caching headers:

pragma
expires

and also

content-disposition

which can turn a file download into an XSS vulnerability.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[Copilot]

Pull Request Overview

This PR enhances security by expanding the list of security-sensitive headers that are monitored for redefinition. The changes add modern security headers and caching-related headers that have become standard practice since the original implementation.

• Adds 8 new security headers including Content Security Policy variants and modern browser security controls
• Includes caching headers (pragma, expires) that can impact security
• Adds content-disposition header which can prevent XSS vulnerabilities in file downloads

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}