Client Block2 reassembly ignores ETag consistency

**Severity:** MEDIUM (from external code review)

Client reassembles Block2 payloads without comparing ETags across blocks. RFC 7959 says client MUST compare ETags if available.

**Fix:** Track ETag from first block, compare on subsequent blocks, abort if mismatch.