test: add Pest v1 security test infrastructure

[somethingwithproof]

Separates the Pest security test infrastructure into its own PR as requested.

[Copilot]

Pull request overview

Adds initial security-oriented test scaffolding under tests/ intended to prevent unsafe reuse of raw request values in HTML output within the monitor plugin.

Changes:

• Adds a “unit” PHP script that validates expected HTML escaping behavior for a sample payload.
• Adds an “integration” PHP script that scans monitor_controller.php / monitor_render.php for specific hardening call patterns.
• Adds an “e2e” PHP script that scans for specific raw get_request_var(...) reuse string patterns.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 5 comments.

File	Description
tests/unit/test_request_output_escaping.php	Adds a basic escaping check for a sample payload.
tests/Integration/test_monitor_request_output_wiring.php	Adds a static source scan asserting expected escaping/encoding call sites exist.
tests/e2e/test_monitor_no_raw_request_reuse.php	Adds a static source scan asserting specific raw-request string patterns are absent.