REGTESTS: http-messaging: test http-hardening profiles and their CLI

REGTESTS: http-messaging: test http-hardening profiles and their CLI

This is an LLM-generated reg-test covering hardening config and CLI.

This covers the declaration and selection of http-hardening profiles, using
a few checks that are easy to observe on HTTP/1 requests:
  - the implicit "trusted" profile is the one used over the loopback when
    no profile or "auto" is set on the bind line, and both implicit
    profiles may be redefined;
  - "from" inherits the settings of another profile, and keywords are
    applied in order ("all on" followed by an exception);
  - "all-reject" and "all-delete" only cover their own family;
  - a server inherits its profile from default-server, and "auto" resets
    it to "trusted";
  - "show http-hardening" lists the profiles (implicit ones being marked
    as such) and dumps one profile's options, and "set http-hardening"
    changes an option by name or number, with immediate effect on both
    bind and server lines, and its error messages;
  - the configuration errors: undeclared or forward-referenced profile on
    bind and server lines, reserved name "auto", duplicate profile, unknown
    or self parent, unknown keyword with a suggestion, invalid value.

Since the "untrusted" profile now enables a few rejections by default, a
redefined "untrusted" profile starts with reject-lowercase-method, so the
test must expect a lower case method to be rejected there. This is now
checked explicitly, as well as the default contents of the implicit
"untrusted" and "trusted" profiles as reported by "show http-hardening",
and their inheritance by "from".