[4] feat: improve retry safety for non-idempotent requests

[romanindev]

Prevent unsafe retries unless idempotency is enabled.

Rules:

• GET → safe
• POST → unsafe unless idempotency key is present

Acceptance criteria

• retry respects method safety
• configurable override