fix: Body-aware successful responses lack private cache control

[mpp-agricola]

Motivation

Agricola found that tempoxyz/mpp-rs diverges from the canonical implementation: fix: Body-aware successful responses lack private cache control

The Agricola ticket #140 contains the audit evidence, affected SDKs, and remediation lifecycle.

Summary

• Reconciles semantic:http-caching/receipt-response-is-private in the target SDK's idioms.
• Adds implementation and regression coverage for AGR-2026-044.
• Links the change to the Agricola ticket #140.

Key design considerations

• Limits scope to the audited delta between wevm/mppx@b7ab48e38e3d and tempoxyz/mpp-rs@28c704988b3d.
• Favors the target SDK's public API and conventions over a literal port.
• Uses the stable agricola/agr-2026-044 automation branch.
• Remains a draft until a maintainer reviews the generated changes.

[github-actions]

✅ Changelog found on PR.

Edit changelog