Preserve original Host header when forwarding to upstream services - This ensures SecurityService receives the correct domain (e.g., api.kamocrm.com) instead of the internal Kubernetes service name, allowing proper organization resolution during login