[MudassarTariq]

Update request handling and prepare version 3.0.2 with its README and changelog.

• Hide configured API keys in request errors, typed bulk errors, and client/config debug output. Preserve HTTP status codes when error bodies cannot be read.
• Restrict redirects to the same protocol, host and port. Apply connection/header and response-idle timeouts, and bound decoded response sizes.
• Validate typed bulk result counts and objects. Keep raw responses and successful lookup data unchanged.
• Add Arabic and the missing CDN, proxy, bot and corporate gateway fields.

The existing public methods and PHP 8.1+ support remain. Typed lookups reject malformed bulk results, and redirects to other servers now fail. Custom HTTP clients retain their handlers and callbacks.

Validation: 102 local unit/HTTP tests; a 50,000-result response over 100 MB; stream and cURL checks; 7 live API tests including Arabic and field comparisons; fresh Composer installation and all 14 PHP README examples. The dependency audit found no known advisories. All five CI jobs passed on PHP 8.1–8.5. The local suite also passed with Guzzle 7.15.2 and 7.16.1.