test: pin 2.x URL/method behavior ahead of 3.0 view split

[tomwojcik]

Behavior-pinning tests for OPTIONS/HEAD, method dispatch ordering, /users/me/ 403 under HIDE_USERS, api-root, and slash-less/unanchored token+jwt URLs. All pass on master unchanged; release/3.0.0 must keep them green.

🤖 Generated with Claude Code

https://claude.ai/code/session_011uYLkj9YnPJ1sNE2Juek2m

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 99.33%. Comparing base (47e9808) to head (e3e12c0).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files

@@           Coverage Diff           @@
##           master     #920   +/-   ##
=======================================
  Coverage   99.33%   99.33%           
=======================================
  Files          27       27           
  Lines         908      908           
=======================================
  Hits          902      902           
  Misses          6        6           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.