A small in-process SAML response builder for tests.
The fake IdP does not attempt to model a real admin UI or cryptographic signing pipeline. It builds protocol-correct XML that exercises the SP pipeline, including the signature and assertion parsing paths used by the test suite.