Full proxy configuration forwarded to the sandbox server as-is (snake_case
so it's wire-compatible with the backend). Mirrors the server's
ProxyConfig type.
Allow/deny list enforced at the proxy sidecar.
Header-injection rules keyed by host pattern.
