doc: Add notes about set_header trusting the app, and ordering of headers in the response
feat: Ignore body and don't set Content-Length for 1xx, 204, and 304 per RFC 2616