fix(accept): replace regex split to mitigate ReDoS (#4758)

* fix(accept): replace regex split to mitigate ReDoS

* test(accept): cover escaped quote and backslash parsing paths

* fix(accept): handle quoted params and comma safely

* refactor: improve accept header parsing

---------

Co-authored-by: Taku Amano <taku@taaas.jp>