Merge commit from fork

* fix(aws-lambda): use last X-Forwarded-For IP in ALB adapter

ALB appends the real client IP to the end of the X-Forwarded-For header.
Taking the first value allows attackers to spoof their IP by prepending
a trusted address, bypassing ipRestriction middleware.

Use the last IP instead, which is the one appended by ALB.

* refactor(test): use it.each for ALB x-forwarded-for tests

Consolidate two similar ALB tests into a parameterized it.each to
improve readability and make each test case clearly distinguishable.