fix(security): align SSRF denylists and reject endpoint userinfo - #7764

PR #7764 did not pass CI / Pull Request attempt 2 (failure), so no E2E run was dispatched.

Jobs that did not pass:

• reviewed-npm-audit — failed step: Audit reviewed production npm graphs.
• cli-test-shards (4) — failed step: Run CLI coverage shard.
• cli-tests — failed step: Verify CLI shards completed.
• checks — failed step: Verify required PR checks.