Gitea Proxy Boundary Fixture

Forwarded header trust boundary and admin gate fixture.

Proof active: trusted forwarded headers crossed the boundary

System: gitea / Family: proxy-boundary

Admin boundary bypass confirmed.