Add comprehensive SAML security test suite (335 tests)

Cover 6 categories: signature wrapping/verification, XML parsing/entity
attacks, assertion/condition validation, encryption/decryption, protocol
binding security, and edge cases/novel attacks across sp/, types/, and
idp/ packages. Include tracking document for all 310 planned test cases.

Author: russellhaering