Strengthen review contracts and HTTP guidance

- add outbound HttpClient transport and HTTP status review rules with paired fixtures`n- resolve layered action-skill overrides deterministically across enabled layers`n- validate findings reports and enforce measurable changed-fixture coverage

microsoft/knowledge/web-services/check-http-status-before-consuming-response-body.bad.al

@@ -0,0 +1,21 @@
+codeunit 50100 "HTTP Status Handling Bad"
+{
+    procedure GetCustomer(CustomerId: Guid): JsonObject
+    var
+        Client: HttpClient;
+        Response: HttpResponseMessage;
+        CustomerJson: JsonObject;
+        ResponseText: Text;
+    begin
+        if not Client.Get(
+             StrSubstNo('https://api.example.com/customers/%1', CustomerId),
+             Response)
+        then
+            Error('The customer service could not be reached.');
+
+        // A completed request can still contain a 4xx or 5xx error document.
+        Response.Content().ReadAs(ResponseText);
+        CustomerJson.ReadFrom(ResponseText);
+        exit(CustomerJson);
+    end;
+}