fix: preserve original host through forward auth

packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrnexus/cli",
-  "version": "0.2.21",
+  "version": "0.2.22",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

packages/cli/src/update.ts

@@ -272,6 +272,14 @@ const MIGRATIONS: Migration[] = [
       // Explicit no-op: updating @wrnexus/dev-server is sufficient.
     },
   },
+  {
+    version: "0.2.22",
+    id: "nested-forward-auth-origin",
+    description: "No project-file changes; nested forward-auth headers are fixed at runtime",
+    apply() {
+      // Explicit no-op: updating @wrnexus/dev-server and helpers is sufficient.
+    },
+  },
 ];
 
 /** Release tooling uses this to require an explicit migration entry per version. */