Restrict MSGraph pagination nextLink to the configured host

[Samin061]

paginated_run follows the @odata.nextLink from each Microsoft Graph response and refetches it with the connection's bearer token attached, while Kiota's allowed_hosts defaults to empty (any host) when no authority is set, so a tampered response can send the token to an arbitrary host. Pin follow-up pagination requests to the configured endpoint's host and refuse a nextLink that points elsewhere.

[potiuk]

@Samin061 — Some review feedback from @dabla is waiting on you: 1 unresolved review thread(s). Could you either push a fix or reply in each thread explaining why the feedback doesn't apply? When you believe the feedback is addressed, please mark the threads as resolved and ping the reviewer (@dabla) for a final look. Thanks!

---

Note: This comment was drafted by an AI-assisted triage tool and may contain mistakes. Once you have addressed the points above, an Apache Airflow maintainer — a real person — will take the next look at your PR. We use this two-stage triage process so that our maintainers' limited time is spent where it matters most: the conversation with you.

[Samin061]

Pushed the refactor: allowed_netloc is resolved once from the request adapter's base_url in get_async_conn and stored on self (init to None in init), so there are no per-run connection lookups anymore. Also updated the adapter mocks in the tests that go through get_async_conn to carry a real base_url. All threads addressed and resolved. @dabla ready for another look when you have a moment.

[dabla]

Well done @Samin061 , the PR has been merged!

[Samin061]

thankyou @dabla for taking time to review, will be looking forward to work more on this repo . thanks againn