test: close HTTP response bodies in server tests to satisfy lint

[Copilot]

What this PR does

Lint was failing in CI (Lint job, check run 105300055160) due to bodyclose findings in server/server_test.go, where several test codepaths could exit via t.Fatalf before body cleanup. This change makes response-body closure explicit at response creation sites so cleanup is guaranteed even on early failures, without changing handler/runtime behavior.

• Root cause

  • golangci-lint (bodyclose) flagged multiple test cases where resp.Body was not reliably closed.

• Change

  • Added a small helper:

    func closeBody(t *testing.T, resp *http.Response) {
    	t.Helper()
    	if resp == nil || resp.Body == nil {
    		return
    	}
    	if err := resp.Body.Close(); err != nil {
    		t.Fatalf("close response body: %v", err)
    	}
    }

  • Updated tests to call defer closeBody(t, resp) immediately after each HTTP response is created.
  • Kept drainBody focused on reading only (no implicit close side effect).

• Scope

  • Test-only change in server/server_test.go (no production code changes).

Related issue

Type

• New provider
• Bug fix
• Documentation
• Refactor
• Chore / CI

How I tested it

• go test ./server
• go test ./...
• golangci-lint v2.5.0 run --timeout=5m ./server (same linter version as CI)

---

Provider PRs only

Skip this section if this is not a provider PR.

• An open issue existed before I started work (provider: <name> label)
• Official webhook documentation link:
• docs/providers/<name>.md written from docs/providers/TEMPLATE.md, every section filled
• All items on the self-review checklist in CONTRIBUTING.md are checked
• Provider code imports only standard-library packages
• Test vectors are real — taken from the provider's official docs, not fabricated
• Both valid-signature and tampered-body test cases are present

---

General checklist

• make check passes locally with no errors
• PR title follows Conventional Commits (feat:, fix:, docs:, test:, refactor:, chore:, ci:)
• Nothing is written to stdout except through the JSONL event writer
• No secrets, tokens, or real webhook payloads are committed

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.