SANITIZE_FIELD_NAMES and http-headers Filter

[astorm]

The next major release should include the following refinements to the SANITIZE_FIELD_NAMES and http-filtering in order to bring us into full complicated with the spec.

Specifically, this includes

1. Remove ['pw','pass','connect.sid'] from the SANITIZE_FIELD_NAMES defaults
   (Update: Decision 2023-07-25 to NOT do this. Do not want a compat breakage to drop these.)
2. Conform to the java agent behavior of capturing cookies in transaction.context.request.cookies and blanking out transaction.context.request.headers.cookies. (Update: this was implemented recently in Send cookies explicitly into context.request's transaction #3322)
3. Redact/sanitize transaction.context.request.cookies per spec (Done. See Send cookies explicitly into context.request's transaction #3322)
4. Remove the individual redacting of the set-cookie http header and values (Done. See Send cookies explicitly into context.request's transaction #3322)
5. Consider either removing the http-headers filter entirely or moving all SANITIZE_FIELD_NAMES logic into this filter. (Done. See Send cookies explicitly into context.request's transaction #3322)

[trentm]

See the "Update" and "Done" notes above.