REDHAT-BUG-2483157: Low severity Red Hat Quay config-tool vulnerability

The Quay config-tool's LDAP and SMTP validation functions in pkg/lib/shared/validators.go make outbound connections to user-supplied endpoints with no IP/host filtering. ValidateEmailServer calls net.DialTimeout to the configured mail server, and ValidateLDAPServer calls ldap.DialURL to the configured LDAP URI. An attacker with config editor access (HTTP Basic Auth on the config-tool editor, Quay <= 3.16) can exploit these to perform internal network reconnaissance from the Quay pod's network position. The config editor web application was removed in Quay 3.17, limiting the attack vector to CLI or container startup in newer versions. The LDAP validator also accepts the ldapi:// scheme and reflects LDAP result codes in error messages. The GitLab OAuth validator separately exposes clientsecret in URL querystrings (CWE-598).