fix(aicore/filtering): address PR review fixes 21-23

- Add py.typed markers to aicore/ and aicore/filtering/ packages so type
  checkers consuming the SDK see the inline annotations (PEP 561).
- Document AICORE_FILTER_TEST_MODEL and AICORE_FILTER_TEST_SELF_HARM_PROMPT
  in .env_integration_tests.example alongside the existing AICORE_*
  entries, with a comment explaining the self-harm prompt is operator-
  populated and kept out of source.
- Narrow extract_filter_blocked's catch-all 'except Exception' to
  '(ValueError, KeyError, TypeError, AttributeError)'. Documents the
  realistic failure modes (JSON parse, missing key, wrong shape, attr on
  non-object) and stops swallowing logic bugs in ContentFilteredError
  construction.

Author: lenin-ribeiro

.env_integration_tests.example

@@ -24,6 +24,15 @@ AICORE_BASE_URL=https://your-aicore-api-url-here/v2
 AICORE_RESOURCE_GROUP=default
 AICORE_MODEL=anthropic--claude-3-5-haiku
 
+# AI CORE filtering integration tests (tests/aicore/integration/)
+# AICORE_FILTER_TEST_MODEL: sap/* model to drive the live filtering scenarios.
+#   Use the cheapest deployment available on your tenant (e.g. sap/gpt-4o-mini).
+# AICORE_FILTER_TEST_SELF_HARM_PROMPT: prompt that should trigger Azure Content
+#   Safety self-harm detection. Set in the CI secret store, not in source.
+#   When unset, the "Input filter blocks a harmful prompt" scenario is skipped.
+AICORE_FILTER_TEST_MODEL=sap/gpt-4o-mini
+AICORE_FILTER_TEST_SELF_HARM_PROMPT=
+
 # AUDITLOG
 CLOUD_SDK_CFG_AUDITLOG_DEFAULT_URL=https://your-auditlog-api-url-here
 CLOUD_SDK_CFG_AUDITLOG_DEFAULT_UAA='{"url":"https://your-auth-url","clientid":"your-client-id","clientsecret":"your-client-secret"}'

src/sap_cloud_sdk/aicore/filtering/filters.py

@@ -608,5 +608,10 @@ def extract_filter_blocked(exc: Exception) -> ContentFilteredError | None:
             details=data,
             request_id=err.get("request_id"),
         )
-    except Exception:
+    except (ValueError, KeyError, TypeError, AttributeError):
+        # JSON parsing failure (ValueError from json.loads), missing dict key
+        # (KeyError), wrong shape (TypeError from .get on non-dict), or attribute
+        # access on a non-object (AttributeError) — all mean the exception
+        # message isn't a content-filter rejection. Let other exception types
+        # (logic bugs in ContentFilteredError construction) surface.
         return None