v2.2.3

What's changed

• fix(tests): prune stale and duplicate tests, retarget the ones that lied (2f0fee3)
• fix(html): clamp table spans like docling's _get_cell_spans (0cc9b3c)
• fix(docs): SECURITY.md lists every resource limit, subprocess and secret (fff7c2f)
• fix(serve): a body over --max-body-mb answers 413, not 400 (462c65f)

Full changelog: v2.2.2...v2.2.3