25cfee5bca
- AuthBrokerClient now checked the response Content-Type and rejected non-SSE responses before parsing. - It required the first parsed SSE event to be a snapshot and treated ended or truncated streams as errors. - Added coverage for non-SSE and missing-initial-snapshot streams, and reset raw SSE state for empty events.