Scoped-audit test oracle: vary container sizes; reject forgeries; per-call stub errors #308

Test-only follow-ups from the review panel on #306 (the implementation for #296). None is a code defect: the real code was probed on a live scoped server and leaks nothing outside the documented classes.

• The generated sweep's containers are the same size for both tags (a dict of 1, a list of 2), so a logged container size would pass the oracle. Vary those sizes between the two calls of a pair.
• The oracle still accepts two forgeries that the real code never produces: a copy of the whole Validation errors echo argument values (pydantic input_value, jsonschema type/pattern) into responses and logs #297 InvokeInput message with a value in input_value=, and a fake <X object at 0x…> repr carrying a value.
• Extra attributes on an excluded log record aren't checked. pmcp's formatters never print them.
• The HTTPError test stub reuses one exception object, so its traceback grows between calls. Create it per call.

🤖 Generated with Claude Code