test/fuzz: include util.h before json.h in fuzz_metadata

json.h includes httpd.h directly, so with the includes sorted
alphabetically Apache's empty PACKAGE_* defines from ap_config_auto.h
land before config.h's real ones and the redefinition trips -Werror in
the CI build job's warning flags (the local default configure carries no
-Werror, which is how it slipped through). Same race and same
clang-format guard as fuzz_cookie.c, which documents it for http.h.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: zandbelt

test/fuzz/fuzz_metadata.c

@@ -19,10 +19,17 @@
  */
 
 #include "fuzz.h"
+/* util.h pulls in const.h before any Apache header does, so config.h's
+ * PACKAGE_* defines win the race against Apache's own (empty) ones in
+ * ap_config_auto.h -- json.h includes httpd.h directly; keep util.h ahead
+ * of it, see cfg/cfg.h's own ordering (clang-format's include sorting
+ * would undo exactly that, hence the guard) */
+/* clang-format off */
+#include "util.h"      /* test fixture */
 #include "json.h"
 #include "metadata.h"
-#include "util.h"      /* test fixture */
 #include "util/util.h" /* oidc_json_decode_object */
+/* clang-format on */
 
 #include <apr_pools.h>
 #include <apr_strings.h>