Resource-Exhaustion DoS

py-libp2p bounds a dev-only /sdp endpoint that believed whatever Content-Length it was told

A temporary signaling harness in the Python libp2p stack buffered exactly as many bytes as an unauthenticated caller claimed. The fix is three constants and an early rejection.