Pure bounded counterpart of native ParseFileHeaders. Header names are case-insensitive and the first duplicate wins, as with http.Header.Get. Native malformed numeric fields become -1; unknown type/write values remain caller data. Parsing does not authorize a file operation or contact a backend.