Cookie Security Inspector

Inspect Set-Cookie headers for SameSite, Secure, HttpOnly, domain/path scope, expiry, prefixes, and hardened rewrites.