feat(appsec): add HTTPX2 SSRF and API10 protection - #19919

• All applicable files are owned properly
  _{Digest: 3d86de1}
• All required reviewers have approved
  _{Digest: 6dc02e2}
• All applicable commits are signed and verified
  _{Digest: 6ffe8e0}
• Security checks passed.
  _{Digest: 9944aa1}

if this seems incorrect, you can retrigger the evaluation of the MergeGate by clicking on this link