Fail closed on removed R3 configuration aliases

[kiddyboots216]

Fail closed on removed R3 configuration aliases

Stack position: after the existing XoRL PR #49 stack tip.

The earlier test-consolidation portion of this branch is already present in
the stack through an equivalent ancestor. After restacking, this PR contains
only the remaining production-facing cleanup:

• reject removed R3 configuration aliases instead of accepting them through
  legacy paths;
• keep server argument validation and its focused regression tests aligned.

Focused server argument tests pass at the restacked head. No campaign receipts
or generated evidence are included.

[broly-code-security-scanner]

Broly Security Scan

Note

✅ Clean scan
No vulnerabilities detected in this PR.

Note

Re-scan this PR anytime with /broly scan — useful after /broly undismiss, or to refresh findings without a new push.

Broly — SAST (zai-org/GLM-5.2) · Secrets · SCA · IaC · GH Actions · Base Images · Supply Chain Threats · Exploit Chains · Adversarial Verification

We're continuously improving Broly's accuracy and finding quality — your feedback is valuable. False positives, missed findings, bugs, and feature requests all welcome.