Proxy

Forward unmatched requests to the hub's core API.

The warden's hub-bound dependency authenticates the caller (401 on a bad key) and, while residency enforcement is on, denies an org pinned to the hub's region that reached a foreign-zone edge — before we read and forward its body. It checks region only: this route runs on the hub's infrastructure, not this satellite's.