2.0.0-rc35

• docs(http): mark the Swoole upload guard as temporary
• refactor(http): identify spoofed uploads from the raw multipart body
• fix(http): stop Swoole unlinking client-chosen upload paths
• fix(http): neutralize client-controlled upload tmp_name in Swoole adapter
• Merge remote-tracking branch 'origin/main' into pr-14785
• fix(http): read forwarded host and port from the nearest proxy
• fix(http): resolve only registered param defaults as callables
• fix(abuse): key rate limits on route path, not request host
• fix(http): count the request body in the request size under Swoole
• Validate response headers before indexing in the HTTP E2E test
• Cover empty terminal chunks against the Swoole transport
• Stop chunked delivery when the transport rejects a write
• Use a concrete response in the streamed byte accounting test
• Abort incomplete S3 streams and return SlowDown on lock contention
• Stream large S3 downloads while retaining the object version
• Merge branch 'main' into chore-dead-package-badges
• fix(http): coerce integer booleans and leave unvalidated params untouched
• test(http): keep covering the deprecated route getMethod without a warning
• style(http): drop the narrating docblock on coerce
• fix(api): pass loose boolean query params to actions as bools
• fix: remove dead CI badges from package READMEs

Changes: appwrite/appwrite@http/2.0.0-rc34...http/2.0.0-rc35