Fix compile_time_options CI failure: apply CommandParser::parse StatusOr change on top of CVE-2026-47220 fix

[Copilot]

PR #45752 ("Change CommandParser::parse to return StatusOr") was based on main before the CVE-2026-47220 fix (commit 4a70d8d594) landed. The CVE fix added null guards to RequestedServerNameFormatter::getHostFromHeaders() for Host() and EnvoyOriginalHost() headers. The PR's code removed those guards, causing runtime crashes in compile_time_options CI (which enables UHV and exercises more header edge cases).

Changes

• API change (envoy/formatter/substitution_formatter.h): CommandParser::parse virtual method now returns absl::StatusOr<FormatterProviderPtr> instead of FormatterProviderPtr
• Formatter implementations (source/common/formatter/, source/extensions/formatter/): All parse overrides updated to return absl::StatusOr<FormatterProviderPtr>
• Extension formatters: cel, dynamic_modules, file_content, generic_secret, metadata, req_without_query, xfcc_value, DNS filter access log — all updated
• CVE fix preserved: getHostFromHeaders() retains null checks from the CVE-2026-47220 fix:

// Safe version (preserved from CVE fix):
case HostOnly: {
  if (auto host = headers->Host(); host != nullptr) {
    result = host->value().getStringView();
  }
  break;
}
case OriginalHostOrHost: {
  if (auto orig = headers->EnvoyOriginalHost(); orig != nullptr) {
    result = orig->value().getStringView();
  } else if (auto host = headers->Host(); host != nullptr) {
    result = host->value().getStringView();
  }
  break;
}

• Tests: CVE regression tests (stream_info_no_requested_name_no_headers) preserved alongside updated StatusOr call sites

[repokitteh-read-only]

As a reminder, PRs marked as draft will not be automatically assigned reviewers,
or be handled by maintainer-oncall triage.

Please mark your PR as ready when you want it to be reviewed!

🐱

Caused by: #45819 was opened by Copilot.

see: more, trace.