fix(reports): trust verified proxy origin

frontend/src/app/api/reports/[reportId]/route.ts

@@ -57,6 +57,7 @@ export async function GET(request: Request, context: RouteContext) {
       requestUrl: request.url,
       origin: request.headers.get("origin"),
       allowedOrigins: resolveAllowedReportOrigins(process.env),
+      requestHeaders: request.headers,
       userId,
       reportId,
       persistence: persistence ?? {
@@ -105,6 +106,7 @@ export async function DELETE(request: Request, context: RouteContext) {
       requestUrl: request.url,
       origin: request.headers.get("origin"),
       allowedOrigins: resolveAllowedReportOrigins(process.env),
+      requestHeaders: request.headers,
       userId,
       reportId,
       persistence: persistence ?? {

frontend/src/app/api/reports/route.ts

@@ -68,6 +68,7 @@ export async function POST(request: Request) {
       requestUrl: request.url,
       origin: request.headers.get("origin"),
       allowedOrigins: resolveAllowedReportOrigins(process.env),
+      requestHeaders: request.headers,
       userId,
       rawBody: await request.json().catch(() => null),
       profile,