fix(security): secure redirect handler - remove auth headers on insecure redirect

[MIchaelMainer]

Improve redirect logic to remove authorization headers on insecure redirect

• Cookie and Authorization header removal on insecure redirect
• Removes Proxy-Authorization when:
  • No proxy is configured
  • Proxy is bypassed for the redirect destination
  • This prevents unnecessary credential removal
• Customizable Scrubbing - Users can implement custom logic via ScrubSensitiveHeaders callback for application-specific headers

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
92.9% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[baywet]

Closing as duplicate of #221