PAPP-38109: harden Censys result handling

[sodle-splunk]

Bug Fixes

• Escape upstream action messages and remove raw response bodies from JSON errors for PSAAS-30375.
• Escape widget values before embedding them in inline JavaScript for PSAAS-30832.
• Remove captured credential-bearing HTTP headers before persisting action results for PSAAS-31808.
• Bound cursor pagination, stop zero-progress pages, truncate oversized responses, and add request timeouts for PSAAS-31815.
• Treat Censys rate limits and v2 API error bodies as action failures for PSAAS-31819.

Manual Documentation

• I have verified that manual documentation has been updated where appropriate

Other information

• Tracking Story: PAPP-38109
• Findings: PSAAS-30375, PSAAS-30832, PSAAS-31808, PSAAS-31815, PSAAS-31819
• Local validation: full pre-commit suite and Python compile checks passed.
• This PR was created entirely with AI assistance. Written by Codex.

---

Please refer to our Contribution Guide for any questions on submitting a pull request.

Thanks for contributing!

[github-actions]

Merging this PR will release 2.2.5 with the following release notes:

2.2.5 (2026-07-18)

Connector release changes

• Escaped upstream action messages in the Censys widget and removed raw response bodies from JSON parsing errors.
• Escaped Censys widget values before embedding them in inline JavaScript contexts.
• Removed credential-bearing HTTP headers from Censys records before storing action-result data.
• Bounded Censys search pagination, stopped zero-progress cursors, truncated oversized pages, and added request timeouts.
• Reported Censys rate limits and v2 API error bodies as action failures instead of empty successful results.

[phantom-jacob]

Approved by Codex after reviewing draft status, release-note formatting, code changes, and associated ticket scope.

[splunk-soar-semantic-release]

🎉 This PR is included in version 2.2.5 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀