[AZ-289] [AZ-290] Batch 3 tests: integration ZIP cap, perf, security, queue

AZ-289 — RL-01 50MB ZIP cap added to RunRouteWithTilesZipTest;
existing integration tests already cover BT-08/BT-09 + AC-1/AC-2.

AZ-290:
- scripts/run-performance-tests.sh extended with PT-01/03/04/05
- SatelliteProvider.IntegrationTests/SecurityTests.cs (SEC-01..SEC-04),
  wired into Program.cs
- SatelliteProvider.Tests/RegionRequestQueueTests.cs covering RS-04 /
  RL-02 queue capacity behavior

Notes:
- RS-04 spec wording ("rejects overflow") drifts from the channel's
  BoundedChannelFullMode.Wait back-pressure semantics. Tests assert
  the actual behavior; spec to be reconciled in Step 12 (Test-Spec
  Sync). Tracked as Low/Spec-Gap in batch_03_review.md.
- Unit tests: 35/35 passed (Docker .NET 8 SDK).
- Integration test project builds clean (0 warnings, 0 errors).

Co-authored-by: Cursor <cursoragent@cursor.com>

SatelliteProvider.IntegrationTests/ExtendedRouteTests.cs

@@ -204,6 +204,13 @@ public static class ExtendedRouteTests
             throw new Exception($"ZIP file seems too small: {zipInfo.Length} bytes");
         }
 
+        const long maxZipBytes = 50L * 1024 * 1024;
+        if (zipInfo.Length > maxZipBytes)
+        {
+            throw new Exception($"ZIP file exceeds 50MB cap: {zipInfo.Length} bytes (max {maxZipBytes})");
+        }
+        Console.WriteLine($"  ZIP size within 50MB cap: {zipInfo.Length / 1024.0 / 1024.0:F2} MB");
+
         Console.WriteLine("✓ Route with Tiles ZIP File Test: PASSED");
     }
 }