HTTP & security headers

Review response headers, redirect chains, and security posture in one call.