V3 bounded HTTP inspection capability pack. By-value connector composition (service_kind=cli, no separate ingredient): one local curl CLI ingredient exposes fixed operations for version readiness, HTTP status/timing, response headers, bounded text body retrieval, and bounded JSON body retrieval. Network operations require approval because they contact a caller-supplied URL, disclose executor network metadata to the remote host, and may reach private network services from the executor environment. The pack permits only http/https URLs, restricts curl and redirect protocols to http/https, disables curl config-file loading and URL glob expansion, caps redirects, connection time, total time, and advertised response size, and does not expose arbitrary methods, request headers, request bodies, uploads, output files, config files, local/file protocols, proxy settings, cookies, credentials, shell wrappers, or arbitrary curl flags. Requires curl on PATH.