Fix attribute execution control and finalize lifecycle

[kettasoft]

Fix attribute execution control and finalize lifecycle

---

Description

### Fixed

#### Attribute execution control

Control attributes were not able to stop filter method execution.
Attributes intended to interrupt execution (e.g. `Required`,
authorization or other control attributes) were executed but
did not prevent the filter method from running.

Control attributes can now properly halt execution when needed.

Example:

```php
#[Required]
public function status(Payload $payload)

will now correctly stop execution when the payload value is missing.

---

Finalization lifecycle

When returning a QueryBuilder via ShouldReturnQueryBuilder
(or $shouldReturnQueryBuilder), the finally() hook was not executed.

Before:

return $builder;

After:

return $this->finally($builder);

This ensures the finalization stage runs consistently regardless
of the return strategy.