- Rename defaults.headers to defaults.headers_for_any_hosts in the pipe mode config command, making explicit that this field applies to all outbound hosts regardless of destination — agents must move credential headers to host_defaults[host].headers to prevent them from leaking to unintended third-party services
- Standardize all internal references from the old 'afh' short name to the full 'afhttp' binary name: env var AFH_BIN → AFHTTP_BIN, temp download directory /tmp/afh/ → /tmp/afhttp/, and all comments and test fixtures
- Fix GitHub Actions CI working-directory (was spores/agent-first-http, must be . since GitHub repo mirrors the spore at its root), add cargo build to e2e test tier before stress tests, and adjust global coverage thresholds to 88%/89% to reflect actual baseline after the --mode refactor