Parse raw email headers into relay hops, originating IP candidates, and SPF/DKIM/DMARC authentication signals.