Hardened Frame Decoder

Implement FrameDecoder over the length-prefixed protocol. The test hammers it with byte-by-byte dribbling, chunk splits at every offset, a 0-length frame, and a hostile 2 GiB length claim (must error "too-long", not allocate).