nx_gzip_inflate_kat_test.nx

nx_gzip_inflate_kat_test.nx -- gzip READ path KAT (Content-Encoding: gzip). Proves nx_gzip_inflate decodes REAL python-`gzip` streams (what servers actually send) end-to-end: RFC1952 header + DEFLATE payload + CRC32 + ISIZE. Composes the proven gunzip (nx_gzip_wrap -> nx_deflate_inflate + nx_crc32), not reinvented. This is the browser's gzip-page READ keystone. G1 plain stream (FLG=0) -> OK, bytes exact, crc & isize verify G2 stream WITH FNAME header field -> OK (optional-field walk exercised) G3 corrupted CRC32 trailer -> NX_GZ_ERR_CRC_MISMATCH (neg-control) G4 corrupted magic ID1 -> NX_GZ_ERR_BAD_MAGIC (neg-control) G3/G4 make the gate DISCRIMINATE (it rejects corruption, not just passes). expect_exit: 0 license_tier: ORIGINAL