Tighten lightfuzz false positives

[liquidsec]

Summary

• Add OAMRequestContext_ to parameter_blacklist_prefixes (Oracle Access Manager infrastructure cookies)
• Add XSRF-TOKEN to parameter_blacklist (missing CSRF token variant)
• Reject Error Resolution baselines with status 403/429 in the serial submodule (transient WAF/rate-limit states produce unstable baselines)

Validated against a recent scan with 400 lightfuzz findings: these three changes catch 23 additional false positives on top of the 247 already eliminated by the nlbi_ blacklist prefix (b87e5ae).

[github-actions]

🚀 Performance Benchmark Report

⚠️ No current benchmark data available

This might be because:

• Benchmarks failed to run
• No benchmark tests found
• Dependencies missing

[codecov]

Codecov Report

❌ Patch coverage is 33.33333% with 2 lines in your changes missing coverage. Please review.
✅ Project coverage is 90%. Comparing base (ef65b09) to head (e66182d).

Files with missing lines	Patch %	Lines
bbot/modules/lightfuzz/submodules/serial.py	34%	2 Missing ⚠️

Additional details and impacted files

@@          Coverage Diff          @@
##             dev   #3223   +/-   ##
=====================================
+ Coverage     90%     90%   +1%     
=====================================
  Files        453     453           
  Lines      46101   46104    +3     
=====================================
+ Hits       41211   41219    +8     
+ Misses      4890    4885    -5     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.