[ISSUE #10832] fix(remoting): reject malformed command frames

[yuluo-yx]

Which Issue(s) This PR Fixes

• Fixes RemotingCommand.decode throws unchecked exceptions for malformed frame headers #10832

Brief Description

Reject short command frames and unknown serialization types with RemotingCommandException instead of unchecked exceptions.

How Did You Test This Change?

• mise x java@temurin-17 -- mvn -pl remoting -am -Dtest=RemotingCommandTest -Dsurefire.failIfNoSpecifiedTests=false test

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 48.31%. Comparing base (fd0c959) to head (4b85579).

Additional details and impacted files

@@              Coverage Diff              @@
##             develop   #10842      +/-   ##
=============================================
- Coverage      48.37%   48.31%   -0.06%     
+ Complexity     13555    13537      -18     
=============================================
  Files           1380     1380              
  Lines         101165   101170       +5     
  Branches       13127    13129       +2     
=============================================
- Hits           48940    48884      -56     
- Misses         46250    46300      +50     
- Partials        5975     5986      +11     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[RockteMQ-AI]

LGTM. Good input validation for RemotingCommand deserialization — rejecting negative opaque, out-of-range version, and negative flag values prevents malformed frames from being processed silently. The NumberFormatException handling for the optional flag field is correct.

---

Automated review by github-manager-bot