Add HTTP/2 transport module to scan guidance

modules/transport-h2/ contains the HTTP/2 sender implementation via
HttpClient5 with ALPN negotiation, flow control, streaming, and error
handling. Add key files to HTTP transport scan area and include
transport-h2 in project structure.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: robertlazarski

AGENTS.md

@@ -81,10 +81,17 @@ The HTTP transport is the network entry point for all protocols
 (JSON-RPC, REST, SOAP). Scan for header injection, request smuggling,
 and URI parsing issues.
 
-Key files:
+Key files (HTTP/1.1 — primary inbound path):
 - `modules/transport/http/src/main/java/org/apache/axis2/transport/http/AxisServlet.java`
 - `modules/transport/http/src/main/java/org/apache/axis2/transport/http/HTTPWorker.java`
 
+Key files (HTTP/2 — outbound sender via HttpClient5):
+- `modules/transport-h2/src/main/java/org/apache/axis2/transport/h2/impl/httpclient5/H2TransportSender.java`
+- `modules/transport-h2/src/main/java/org/apache/axis2/transport/h2/impl/httpclient5/H2FlowControlManager.java`
+- `modules/transport-h2/src/main/java/org/apache/axis2/transport/h2/impl/httpclient5/H2StreamingRequestImpl.java`
+- `modules/transport-h2/src/main/java/org/apache/axis2/transport/h2/impl/httpclient5/H2ErrorHandler.java`
+- `modules/transport-h2/src/main/java/org/apache/axis2/transport/h2/impl/httpclient5/ALPNProtocolSelector.java`
+
 ### 5. XML Parsing (XXE/SSRF via third-party libraries, secondary)
 
 wsdl4j and xmlschema-core create their own XML parser factories without
@@ -132,6 +139,7 @@ modules/
   kernel/       Core engine: message pipeline, handlers, deployment,
                 XML parsing, dispatchers, context
   transport/    Pluggable transports: HTTP, local, JMS, TCP, UDP, mail
+  transport-h2/ HTTP/2 transport sender (HttpClient5, ALPN, flow control, streaming)
   openapi/      OpenAPI schema generation, Swagger UI, MCP catalog
   mcp-bridge/   MCP stdio bridge for AI agent integration
   webapp/       Admin console WAR